Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Threat Intel A fake Slack download is giving attackers a hidden desktop on your machine April 16, 2026 – This trojanized Slack installer looks normal, but quietly gives attackers an invisible desktop to access your accounts and data. We take a deep dive into the attack. News “iCloud storage is full” scam is back, and now it wants your payment details Data breaches Booking.com breach gives scammers what they need to target guests Scams Fake YouTube copyright notices can steal your Google login Bugs April Patch Tuesday fixes two zero-days, including one under active attack PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE Browser Guard gets even better with Access Control Malwarebytes Labs April 16, 2026 0 Comments Take control of pesky permission pop-ups and decide exactly which websites can access your camera, microphone, location, and send you notifications. “iCloud storage is full” scam is back, and now it wants your payment details Pieter Arntz April 16, 2026 0 Comments Apple users: Watch out for “upgrade now or lose your photos” scams that rush you into handing over your payment details. A fake Slack download is giving attackers a hidden desktop on your machine Stefan Dasic April 16, 2026 0 Comments This trojanized Slack installer looks normal, but quietly gives attackers an invisible desktop to access your accounts and data. We take a deep dive into the attack. Booking.com breach gives scammers what they need to target guests Danny Bradbury April 16, 2026 0 Comments Guest reservation data stolen from the booking giant can be used by scammers to impersonate hotels to steal payment and personal info. AI clickbait can turn your notifications into a scam feed Pieter Arntz April 15, 2026 0 Comments A new AI-driven campaign known as Pushpaganda is using clickbait to turn your browser notifications into a stream of scams and fake alerts. Fake YouTube copyright notices can steal your Google login Stefan Dasic April 15, 2026 0 Comments This convincing copyright scam is targeting YouTube creators. Attackers can take over your channel, plus your entire Google account. From fake Proton VPN sites to gaming mods, this Windows infostealer is everywhere Gabriele Orini April 15, 2026 0 Comments Hiding in imposter sites, GitHub downloads, and YouTube links, this infostealer is designed to hijack accounts and drain cryptocurrency wallets. April Patch Tuesday fixes two zero-days, including one under active attack Pieter Arntz April 15, 2026 0 Comments This month’s Patch Tuesday addresses 167 vulnerabilities, including two zero-days that could lead to system compromise, data exposure, and privilege escalation. Credit Resources Vault: Why this credit email set off our scam alarms Pieter Arntz April 15, 2026 0 Comments Inside a targeted email campaign that funnels the most vulnerable financial people into handing over sensitive data, and signing up for weekly fees. 1 2 3 … 616 Next Contributors Threat Center Podcast Glossary Scams
