Malwarebytes Labs

The article highlights multiple security threats, including malware spread through verified ads on Mac systems, the ConsentFix malware stealing Microsoft accounts, and vulnerabilities in Apple's Hide My Email feature. It also covers fake Google and Cloudflare verification pages distributing malware, a critical WinRAR flaw, a deceptive Perplexity Chrome extension, and security updates from Apple for iOS, MacOS, and Safari.

The article highlights multiple cybersecurity threats, including malware stealing Chrome session cookies, parcel mule scams, and critical browser vulnerabilities. It also covers data breaches, phishing scams targeting website owners, and dark web activities involving stolen identities and malware.

Malwarebytes Labs reported cleaning nearly 15,000 infected websites in a SocGholish crackdown. Apple patched a Beats Studio Buds vulnerability, Microsoft addressed the RoguePlanet flaw, and retro gaming fans faced fake GitHub malware. Kodak confirmed a breach linked to ShinyHunters, Roblox developers lost games to malware, and 24 billion records were exposed online. Malwarebytes received AV-TEST awards for its security solutions.

A fake Windows update scam uses a typosquatted domain to mimic official Microsoft branding, tricking users into downloading malware that steals passwords, payment details, and account access. The malware employs legitimate tools and layered attack techniques to evade detection, persisting on systems by blending with normal processes and modifying apps like Discord.