A week in security (August 24 – August 30)

Last week on Malwarebytes Labs:

• Protect your WhatsApp account with new passkey and 2FA upgrades
• The AI agent swarm that attacked Hugging Face is a warning for the future
• Flock wants privacy to meet surveillance halfway
• Fake listings can turn trusted platforms into scam springboards
• Fake Apple Pay charge brings the classic tech support scam to your phone
• New Instagram and Facebook rules set a default two-hour limit for teens
• Update Chrome before you browse again
• Popular school apps may be sharing student data with advertisers
• Beware of fake Indeed interview apps used to install spyware
• Grok fooled into stealing user chat, location data, and more
• GTA 6 leak hunt could expose data belonging to thousands of Discord users
• TikTok phishing: How to spot fake login and verification pages
• Fake GTA 6 Extended Look and demo sites deliver an infostealer
• Fake Microsoft security scans trick victims into uninstalling their antivirus
• What happens to your data when you die? (Lock and Code S07E17)
• AliExpress caught using silent audio to fingerprint visitors’ browsers
• ToxicPanda 2.0 can take over your Android phone and banking apps
• Tracking PavinLoader across ClickFix and fake download campaigns

Stay safe!

Scammers know more about you than you think.

Malwarebytes Mobile Security protects you from phishing, scam texts, malicious sites, and more. With real-time AI-powered Scam Guard built right in.

Download for iOS → Download for Android →