https://blog.malwarebytes.com/scams/2022/05/opensea-warns-of-discord-channel-compromise/

https://blog.malwarebytes.com/?p=56439

OpenSea, the primary marketplace for buyers and sellers of non-fungible tokens (NFTs), has reported major problems with its Discord support channel. How major? Well, there’s a “potential vulnerability” which allowed spambots ( Read more... )

https://blog.malwarebytes.com/scams/2022/05/steer-clear-of-these-instagram-get-rich-with-bitcoin-scams/

https://blog.malwarebytes.com/?p=55979

I don’t know about you, but I open Instagram to look at cool photos of pets, not to make a fortune via suspicious claims of riches by strangers.

Despite this, following someone whose photos I liked resulted ( Read more... )

https://blog.malwarebytes.com/scams/2022/05/steer-clear-of-fake-premium-mobile-app-unlockers/

https://blog.malwarebytes.com/?p=56166

A site has been bouncing around YouTube comments for the past couple of weeks. The site sometimes changes, the messages alter slightly, but the essence remains the same: In all cases, people acting in suspiciously ( Read more... )

https://blog.malwarebytes.com/scams/2022/05/how-instagram-scammers-talk-users-out-of-their-accounts/

https://blog.malwarebytes.com/?p=56211

If you’ve dealt with a scammer, you’ll know that making up stories is their bread and butter. Think about it: Just when you thought you’d heard all the infamous 419 scam backstories, scammers surprise you with a ( Read more... )

https://blog.malwarebytes.com/threat-intelligence/2022/05/ransomware-april-2022-review/

https://blog.malwarebytes.com/?p=56404

The Malwarebytes Threat Intelligence team monitors the threat landscape continuously and produces monthly ransomware reports based on a mixture of proprietary and open-source intelligence.

April 2022 was most notable for ( Read more... )

https://blog.malwarebytes.com/scams/2022/05/the-43-billion-business-email-compromise-threat/

https://blog.malwarebytes.com/?p=56369

The FBI has released a public service announcement regarding the ever-present threat of Business Email Compromise (BEC). This comes hot on the heels of an earlier release from the Las Vegas FBI department in April. ( Read more... )

https://blog.malwarebytes.com/threat-intelligence/2022/05/nigerian-tesla-419-scammer-gone-malware-distributor-unmasked/

https://blog.malwarebytes.com/?p=54480

Agent Tesla is a well-known data stealer written in .NET that has been active since 2014 and is perhaps one of the most popular payloads observed in malspam campaigns.

While looking for ( Read more... )

https://blog.malwarebytes.com/exploits-and-vulnerabilities/2022/05/google-fixes-two-critical-pixel-vulnerabilities-get-your-updates-when-you-can/

https://blog.malwarebytes.com/?p=56375

Google has made updates available for Android 10, 11, 12 and 12L. The May Android Security Bulletin contains details of security vulnerabilities affecting Android ( Read more... )

https://blog.malwarebytes.com/ransomware/2022/05/its-business-as-usual-for-revil-ransomware/

https://blog.malwarebytes.com/?p=56303

After the FBS arrested 14 of its members in January, and a subsequent lull in action, the REvil ransomware gang appears to be back. We say “appears” because it’s still unclear whether the group’s operations have indeed ( Read more... )

https://blog.malwarebytes.com/privacy-2/2022/05/world-password-day-brushing-up-on-the-basics/

https://blog.malwarebytes.com/?p=56306

World Password Day is today, reminding us of the value of solid passwords, and good password practices generally. There are awareness days for all sorts of things, and perhaps we don’t need all of them. You can’t go ( Read more... )