# Malwarebytes Cyber Security Software & Anti-Malware This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## 12 celebrity deepfake websites seized by Manhattan DA DevFeed: [12 celebrity deepfake websites seized by Manhattan DA]() Original publisher: [Read original article]() Author: Danny Bradbury Published: 2026-09-17T11:20:46Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Artificial Intelligence](), [Security]() Tags: [ai](), [department-of-homeland-security](), [department-of-justice](), [privacy](), [report](), [security]() ### AI overview The Manhattan District Attorney's Office seized 12 websites that hosted AI-generated celebrity deepfakes, including non-consensual intimate imagery depicting more than 1,200 people. The article describes the harms of deepfake abuse and expanding legal action against its distribution. ### Source excerpt The largest known celebrity deepfake seizure has taken 12 websites offline, disrupting access to videos depicting some 1,200 people. ## T-Mobile rewards points expiry texts are a phishing scam DevFeed: [T-Mobile rewards points expiry texts are a phishing scam]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-17T10:44:01Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [account](), [App]() Tags: [customer](), [links](), [messages](), [phishing](), [points](), [reward-points](), [rewards-points](), [scam](), [scams](), [t-mobile](), [threat-intel]() ### AI overview Malwarebytes reports a phishing campaign that sends fake T-Mobile rewards-point expiry messages. The messages use invented balances, urgent expiry dates, and phishing links to pressure recipients into clicking before verifying the claim. ### Source excerpt A large phishing campaign is using fake T-Mobile rewards points and looming expiry dates to pressure recipients into clicking malicious links. ## Google's September 2026 Pixel update addresses a modem vulnerability reportedly under limited, targeted exploitation DevFeed: [Google's September 2026 Pixel update addresses a modem vulnerability reportedly under limited, targeted exploitation]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-16T10:39:04Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Google](), [pixel](), [Vulnerabilities](), [Android Security](), [Security & Privacy](), [Mobile]() Tags: [android-security](), [bugs](), [cve-2026-58704](), [google](), [mobile](), [modem](), [news](), [pixel](), [security](), [update](), [vulnerabilities](), [vulnerability]() ### AI overview Google's September 2026 Pixel security update fixes 110 vulnerabilities, including CVE-2026-58704, a high-severity cellular modem permission-bypass flaw that may be under limited, targeted exploitation. Pixel users should install the update and verify that their device shows the September 5, 2026 security patch level or later. ### Source excerpt Google's September Pixel update fixes 110 vulnerabilities, including a modem flaw being used in limited, targeted attacks. ## AI helps scammers build convincing antivirus renewal pages DevFeed: [AI helps scammers build convincing antivirus renewal pages]() Original publisher: [Read original article]() Author: Stefan Dasic Published: 2026-09-16T08:41:19Z Content type: article Language: en Sources: [Malwarebytes]() Topics: [Artificial Intelligence](), [Security](), [remote access software]() Tags: [ai](), [remote-access-software](), [scams](), [security](), [threat-intel]() ### AI overview The article examines an Avast impersonation site targeting users in Belgium with a fake EUR 129.99 antivirus renewal notice. It reports that the polished design and fluent copy showed signs of AI assistance, while a cancellation form collected names, email addresses, and Belgian mobile numbers for possible follow-up scams. ### Source excerpt A fake Avast renewal page shows how AI is helping scammers create more convincing traps with polished designs and fluent copy. ## How to opt out of AI chatbot training DevFeed: [How to opt out of AI chatbot training]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-15T15:41:44Z Content type: tutorial Language: en Sources: [Malwarebytes]() Topics: [ChatGPT](), [OpenAI](), [online privacy](), [Artificial Intelligence]() Tags: [ai](), [anthropic](), [chatgpt](), [how-to](), [human-review](), [news](), [openai](), [perplexity](), [privacy](), [privacy-filter]() ### AI overview This tutorial explains how to turn off ChatGPT's "Improve the model for everyone" setting to opt out of using chats for model improvement. It also notes that authorized personnel and trusted service providers may still access content for safety, support, troubleshooting, security, abuse investigations, or legal matters. ### Source excerpt ChatGPT contractors are reviewing real users' conversations. Here's how to stop AI companies using your chats for model training. ## HBO Max's verified Reddit account hijacked to spread malware DevFeed: [HBO Max's verified Reddit account hijacked to spread malware]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-15T11:51:03Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Malware](), [ClickFix](), [Reddit](), [Social engineering](), [passwords](), [Cryptocurrency](), [macOS](), [Windows]() Tags: [clickfix](), [cryptocurrency](), [hbo-max](), [macos](), [malware](), [news](), [passwords](), [pasteswitch](), [powershell](), [reddit](), [security](), [social-engineering](), [terminal](), [windows]() ### AI overview Cybercriminals hijacked HBO Max's verified Reddit account and used it to run 108 malicious ads over about 48 hours. The ads promoted fake software and used ClickFix-style instructions to distribute infostealers and cryptocurrency clipboard hijackers to macOS and Windows users. ### Source excerpt Cybercriminals used HBO Max's verified Reddit account to run 108 malicious ads that tricked people into installing information stealers. ## Meta AI builds detailed profiles of children from years of family posts DevFeed: [Meta AI builds detailed profiles of children from years of family posts]() Original publisher: [Read original article]() Author: Danny Bradbury Published: 2026-09-15T09:44:10Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Artificial Intelligence](), [Meta](), [Instagram]() Tags: [ai](), [automated](), [facebook](), [family-and-parenting](), [information](), [instagram](), [issue](), [location](), [meta](), [photos](), [privacy](), [profile](), [social-media](), [statement]() ### AI overview A mother says Meta AI assembled detailed profiles of her young daughters by connecting names, birth details, photos, videos, and location information from family posts across Facebook and Instagram. Meta acknowledged that the feature should not have prompted questions about personal topics and said it fixed the issue. ### Source excerpt A mother says Meta AI pieced together names, birth details, photos, and location information about her young daughters from years of family posts. ## Search results are sending people to fake Bitrefill checkouts DevFeed: [Search results are sending people to fake Bitrefill checkouts]() Original publisher: [Read original article]() Author: Stefan Dasic Published: 2026-09-15T08:40:22Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Cryptocurrency](), [Bitcoin](), [Website]() Tags: [bitcoin](), [cryptocurrency](), [fraud](), [payments](), [phishing](), [qr-code](), [scam](), [scams](), [search](), [threat-intel]() ### AI overview Fake Bitrefill checkout pages are appearing in search results and copying the company's branding and payment flow. They persuade victims to send cryptocurrency to scammer-controlled addresses, with no goods delivered and little chance of recovering the payment. ### Source excerpt Fake Bitrefill checkout pages are appearing in search results and tricking people into sending cryptocurrency directly to scammers. ## Google's new search redirects make links harder to check before you click DevFeed: [Google's new search redirects make links harder to check before you click]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-14T14:17:44Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Google](), [Google Search](), [Search engine optimization (SEO)](), [Security](), [Accessibility](), [Reddit]() Tags: [accessibility](), [data](), [google](), [google-search](), [goto-url](), [news](), [reddit](), [search](), [security](), [seo](), [serp]() ### AI overview Google is routing some search result links through opaque, Google-specific redirects instead of linking directly to destinations. The change may make bulk URL extraction harder, but it also limits legitimate tools and makes it more difficult for users to verify a link's destination by hovering before clicking. ### Source excerpt Google says its new opaque redirects tackle evolving abuse, but they also prevent users from checking a result's destination by hovering over it. ## A week in security (September 7 - September 13) DevFeed: [A week in security (September 7 - September 13)]() Original publisher: [Read original article]() Author: Malwarebytes Labs Published: 2026-09-14T07:01:00Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Security](), [Cybersecurity]() Tags: [2026](), [bluemoon](), [cybersecurity](), [grindr](), [lg-tvs](), [news](), [security]() ### AI overview A weekly security roundup covering topics discussed from September 7 to September 13, 2026. ### Source excerpt A list of topics we covered in the week of September 7 to September 13 of 2026 ## Crypto customers targeted by scammers after email marketing provider breach DevFeed: [Crypto customers targeted by scammers after email marketing provider breach]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-11T15:01:53Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [vulnerability](), [incident](), [API keys]() Tags: [attacks](), [breach](), [cryptocurrency](), [news](), [phishing](), [scams](), [security](), [supply-chain]() ### AI overview A Brevo breach enabled phishing emails targeting cryptocurrency-company newsletter subscribers. The attacker exploited a SAML SSO handling flaw, accessed 138 accounts, and used some accounts to send phishing messages or export contacts. ### Source excerpt A breach at email marketing company Brevo exposed Trezor, CoinTracking, and BitBox customers to phishing emails, but others may also be at risk. ## Android malware creates a hidden copy of your banking app DevFeed: [Android malware creates a hidden copy of your banking app]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-11T12:14:55Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Malware](), [App]() Tags: [android](), [app](), [credential-theft](), [fraud](), [malware](), [mobile](), [news](), [phishing](), [profile](), [security](), [transactions]() ### AI overview Gigabud is an Android banking Trojan that creates a work profile and clones a banking app so operators can conduct fraudulent transactions separately from malware detected in the personal profile. ### Source excerpt The Gigabud banking Trojan can clone a banking app into a separate work profile on an Android device to help hide fraudulent transactions. ## BlueMoon exploit kit turns Chrome and Windows flaws into attacks DevFeed: [BlueMoon exploit kit turns Chrome and Windows flaws into attacks]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-10T15:49:13Z Content type: article Language: en Sources: [Malwarebytes]() Topics: [BlueMoon](), [Vulnerabilities](), [Google](), [Microsoft]() Tags: [ai](), [attacks](), [bluemoon](), [bugs](), [chrome](), [news](), [phishing](), [update](), [vulnerabilities](), [windows]() ### AI overview BlueMoon is a shared exploit kit used by four espionage groups to exploit recently patched Chrome V8 and Windows vulnerabilities after phishing clicks. The article argues that attackers can weaponize public fixes quickly, making prompt patch deployment important; AI assistance is suggested only as an unproven possibility. ### Source excerpt Four different espionage groups used the same exploit kit to target recently fixed flaws, showing why "patch later" is a dangerous gamble. ## Will AI kill us all within the next decade? DevFeed: [Will AI kill us all within the next decade?]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-10T12:18:51Z Content type: opinion Language: en Sources: [Malwarebytes]() Topics: [Responsibility & Safety](), [AI Strategy](), [AI Development](), [Vulnerabilities](), [anthropic]() Tags: [ai](), [ai-safety](), [anthropic](), [autonomous](), [fraud](), [models](), [news](), [superintelligence](), [vulnerabilities]() ### AI overview The article discusses warnings about possible future AI risks while noting that current models are described as low risk. It argues for safeguards such as independent testing, limits on high-risk autonomous uses, transparency, and accountability, alongside action against AI-enabled cybercrime. ### Source excerpt AI researchers are warning that the technology could kill us all within the next decade, although they say the risk from current models is low. ## Update Chrome now to protect against an actively exploited vulnerability DevFeed: [Update Chrome now to protect against an actively exploited vulnerability]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-10T10:52:08Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Vulnerabilities](), [bug]() Tags: [browser](), [bugs](), [chrome](), [javascript](), [memory](), [news](), [sandbox](), [security](), [stable-channel](), [update](), [vulnerability](), [webgl]() ### AI overview Chrome's desktop update fixes 230 security issues, including CVE-2026-87491, an actively exploited V8 out-of-bounds write flaw. The article explains how to update Chrome and describes the vulnerability's potential impact within the browser sandbox. ### Source excerpt Chrome issues another monster update, fixing an actively exploited V8 vulnerability and 229 other flaws. ## More than 100,000 fake stores are out to steal your card details DevFeed: [More than 100,000 fake stores are out to steal your card details]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-09T15:02:53Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Cybersecurity](), [Security & Privacy](), [WebSocket]() Tags: [authentication](), [backends](), [cybersecurity](), [doppelcart](), [fake-webshops](), [news](), [scams]() ### AI overview Researchers identified DoppelCart, a large network of cloned online stores that copies real retailers and steals card data and bank confirmation codes during checkout. ### Source excerpt DoppelCart's fake stores copy real retailers and steal shoppers' card details and one-time bank confirmation codes. ## Microsoft fixes record 964 flaws, including 2 exploited zero-days DevFeed: [Microsoft fixes record 964 flaws, including 2 exploited zero-days]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-09T10:01:08Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Vulnerabilities]() Tags: [bugs](), [cve-2026-81963](), [cve-2026-85880](), [dns](), [microsoft](), [news](), [patch-tuesday](), [september-2026](), [vulnerabilities](), [windows]() ### AI overview Microsoft's September 2026 Patch Tuesday fixes 964 customer-patched vulnerabilities, including two actively exploited Windows zero-days. ### Source excerpt Microsoft's September 2026 Patch Tuesday fixes a record 964 vulnerabilities, including two actively exploited zero-days. ## Grindr settles HIV status data-sharing lawsuit for $35 million DevFeed: [Grindr settles HIV status data-sharing lawsuit for $35 million]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-08T12:51:14Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [online privacy](), [App](), [SDKs]() Tags: [advertising](), [grindr](), [lawsuit](), [news](), [norway](), [privacy](), [sdks](), [uk-lawsuit]() ### AI overview Grindr reportedly agreed to settle a UK lawsuit alleging that it shared sensitive user data, including HIV-status information, with advertisers. The article explains privacy risks from advertising identifiers, analytics, SDKs, and other third-party app integrations. ### Source excerpt Grindr has settled a UK lawsuit alleging that it shared sensitive user data, including HIV status, with advertising companies. ## MikroTik router flaws allow takeover without a password DevFeed: [MikroTik router flaws allow takeover without a password]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-08T09:49:16Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Cybersecurity](), [Vulnerabilities](), [Networks](), [passwords]() Tags: [authentication](), [cve-2026-67276](), [cve-2026-86060](), [cybersecurity](), [mikrotik](), [news](), [ssh](), [update](), [vulnerabilities]() ### AI overview Attackers are actively exploiting two MikroTik RouterOS flaws, dubbed MikroTrick, to bypass SSH authentication and escalate privileges on internet-exposed routers. The article recommends promptly installing RouterOS updates and restricting SSH and other remote-management access. ### Source excerpt Attackers are exploiting critical RouterOS flaws to take control of routers with SSH exposed to the internet. ## Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) DevFeed: [Loyalty points fraud is funding hacker holidays (Lock and Code S07E18)]() Original publisher: [Read original article]() Author: Malwarebytes Labs Published: 2026-09-07T18:23:18Z Content type: article Language: en Sources: [Malwarebytes]() Topics: [Cybercrime](), [passwords]() Tags: [account-takeover](), [airline](), [airline-miles](), [credit-card-points](), [cybercrime](), [fraud](), [hotel-rewards](), [loyalty-account](), [loyalty-points](), [loyalty-points-fraud](), [podcast](), [points](), [rewards-account](), [rewards-points]() ### AI overview A Lock and Code podcast episode examines loyalty-points theft, why criminals target points balances, and ways companies and consumers can protect against fraud. ### Source excerpt This week on the Lock and Code podcast, we speak with Kim Sutherland about loyalty points fraud and how everyday people can stay safe. ## LG TV flaws could let attackers listen in, even in standby mode DevFeed: [LG TV flaws could let attackers listen in, even in standby mode]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-07T13:34:40Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Vulnerabilities](), [Networks](), [Embedded Software Dev]() Tags: [acr](), [audio](), [lg](), [networks](), [news](), [privacy](), [security](), [smart-tv](), [testing](), [vulnerabilities]() ### AI overview An investigation reported that LG smart TVs may scan local networks and collect viewing-related data, while undisclosed vulnerabilities could enable audio capture from a compromised TV. ### Source excerpt Testing found that LG smart TVs can track viewing and scan home networks, while security flaws could let attackers record conversations. ## Flirty OnlyFans promoters on X may be using AI to appear human DevFeed: [Flirty OnlyFans promoters on X may be using AI to appear human]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-07T11:18:00Z Content type: article Language: en Sources: [Malwarebytes]() Topics: [AI Chat](), [Script](), [Chat Bot](), [Bot](), [ASCII]() Tags: [ai](), [ascii](), [bots](), [fraud](), [generative-ai](), [messaging](), [onlyfans](), [scam](), [scams](), [scripted](), [threat-intel](), [voice]() ### AI overview An investigation examines X accounts promoting OnlyFans pages that combine repetitive flirtatious scripts with dynamic replies, raising the possibility of generative AI-assisted messaging. It warns that personalized responses and voice notes may no longer reliably distinguish people from automated accounts. ### Source excerpt Personalized replies and voice notes make it increasingly difficult to tell whether you're talking to a human, chatbot, or AI agent. ## The hidden work of modernizing Malwarebytes DevFeed: [The hidden work of modernizing Malwarebytes]() Original publisher: [Read original article]() Author: Anna Tukhtarova Published: 2026-09-04T17:15:42Z Content type: article Language: en Sources: [Malwarebytes]() Topics: [.NET](), [migration](), [Endpoint Security & XDR](), [Operating system]() Tags: [diagnostics](), [drivers](), [endpoint-security](), [engineering](), [inside-malwarebytes](), [migration](), [modernization](), [net](), [security]() ### AI overview The article explains Malwarebytes' migration of its managed Windows components to .NET 10 and why runtime and dependency upgrades require security-feature-level rigor in endpoint software. ### Source excerpt Why disciplined dependency modernization is one of the highest-leverage engineering investments a security product can make. ## X Money rollout linked to password-reset attacks DevFeed: [X Money rollout linked to password-reset attacks]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-04T12:29:41Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [passwords]() Tags: [account-takeover](), [attacks](), [breach](), [financial-services](), [how-to](), [news](), [password-reset](), [scams](), [security](), [social-engineering](), [x-money]() ### AI overview X is investigating unsolicited password-reset emails sent to users amid the wider availability of X Money. The company says it has found no evidence of a breach, successful account takeovers, or access to X Money funds. ### Source excerpt As X expands into payments, users are receiving password-reset emails they didn't request. Here's what may be happening and how to stay safe. [Next page]()