A week in security (September 22 – September 28)

Last week on Malwarebytes Labs:

• Hackers threaten parents: Get nursery to pay ransom or we leak your child’s data
• Google and Flo to pay $56 million after misusing users’ health data
• Neon App pays users to record their phone calls, sells data for AI training [updated]
• New SVG-based phishing campaign is a recipe for disaster
• LinkedIn will use your data to train its AI unless you opt out now
• TikTok is misusing kids’ data, says privacy watchdog
• Police using drones to read your license plates, warns EFF
• Malwarebytes for Teams now includes VPN
• Fake Malwarebytes, LastPass, and others on GitHub serve malware
• Can you disappear online? (Lock and Code S06E19)
• American Archive of Public Broadcasting allowed access to restricted media for years
• Scammers are impersonating the FBI to steal your personal data
• Beware of Zelle transfer scams
• ChatGPT solves CAPTCHAs if you tell it they’re fake

Stay safe!

We don’t just report on scams—we help detect them

Cybersecurity risks should never spread beyond a headline. If something looks dodgy to you, check if it’s a scam using Malwarebytes Scam Guard, a feature of our mobile protection products. Submit a screenshot, paste suspicious content, or share a text or phone number, and we’ll tell you if it’s a scam or legit. Download Malwarebytes Mobile Security for iOS or Android and try it today!