A tech opinion piece examines whether paid antivirus subscriptions remain worthwhile now that threats have shifted from classic viruses toward phishing pages, scam emails and fake tech-support pop-ups. It notes that vendors like Malwarebytes and Norton bundle extras such as VPNs, password managers and cloud backup into paid tiers, while Microsoft Defender plus free scanners and browser protections like Edge's SmartScreen already cover most core needs.
engadget.com
· 2026-10-19
Cybersecurity firm Malwarebytes reports that AI agents handling email can be manipulated by prompt injection attacks, where hidden instructions invisible to humans are embedded to hijack the assistant's behavior. The company says this differs from traditional phishing because the AI, not a person, is being deceived, and current fixes rely on filtering hidden content before it reaches the model.
futurism.com
· 2026-10-17
Ahead of Friday's official iPhone Duo preorder launch, a fraudulent website mimicking Apple's design and offering a fake $500 discount is using the leaked DarkSword exploit chain to attack vulnerable, unpatched iPhones. Malwarebytes researchers say simply visiting the page can trigger an attack that harvests device data, notes, keychain credentials and cryptocurrency wallet files from apps like MetaMask, Phantom and Coinbase Wallet, then exfiltrates them to a remote server.
9to5mac.com
· 2026-09-30
Security researchers at Malwarebytes have identified a fraudulent advertisement claiming Apple's unreleased iPhone Duo foldable can be preordered now for a $500 discount, even though Apple has said preorders start October 16 and sales begin October 23. The scam relies on the DarkSword exploit chain, which can steal data from vulnerable iPhones running iOS 18.4 to 18.6.2 simply by loading the malicious page, without requiring any clicks or typed input.
cnet.com
· 2026-09-29
Malwarebytes' ThreatDown researchers identified a new botnet, Carbonato, that scans for Docker hosts with unauthenticated APIs on port 2375 and hijacks them via privileged containers. The malware installs SSH backdoors, sets up multiple persistence mechanisms, and deploys the Hermes Agent AI framework under an agent named GH0ST to execute operator commands and exfiltrate credentials and API keys via Telegram. The findings came from an unauthenticated Docker registry containing nearly 60 repositories and 4.3GB of data spanning operations from October 2024 to August 2026.
bleepingcomputer.com
· 2026-09-24
Malwarebytes reported a phishing campaign that impersonates a promotion from Anthropic, falsely claiming to offer 10,000 users a free month of Claude Max to mark 100 million users. Victims who click through are directed to a fake Google login page designed to steal their credentials, using a convincing 'browser-in-a-browser' overlay that mimics a real Google sign-in window.
cnet.com
· 2026-09-23
Cybersecurity firm Malwarebytes has identified fake websites posing as Rockstar Games that promise a playable Grand Theft Auto VI demo, which doesn't actually exist. Clicking the 'Play Now' button on these sites downloads an information-stealing malware disguised as a game installer, rather than any game files.
techcrunch.com
· 2026-08-25
GoKawiil