Malwarebytes Labs - The Security Blog From Malwarebytes

Kaseya Unitrends has unpatched vulnerabilities that could help attackers expand a breach

July 27, 2021 - Kaseya Unitrends, another service offered by Kaseya, includes a newly-discovered vulnerability. It's not as bad as Kaseya VSA's flaws.

Awareness

The Clubhouse database “breach” is likely a non-breach. Here’s why.

July 27, 2021 - 3.8 billion phone numbers were reportedly leaked from Clubhouse's secret database. They're just random numbers though.

Mac

OSX.XLoader hides little except its main purpose: What we learned in the installation process

July 26, 2021 - We dig into OSX.XLoader, also known as X Loader, which is the latest threat to macOS that bears some similarities to novice malware.

A week in security

A week in security (July 19 – July 25)

July 26, 2021 - A roundup of the previous week's breaking information security news and happenings, dated July 19 through July 25.

Threat analysis

AvosLocker enters the ransomware scene, asks for partners

July 23, 2021 - We examine AvosLocker, a new ransomware aiming to grow into the coveted big game hunting space.

Ransomware

CNA legal filings lift the curtain on a Phoenix CryptoLocker ransomware attack

July 23, 2021 - According to CNA, the attack started when an employee downloaded a fake browser from a legitimate website.

Scams | Social engineering

Busted! Fraud-as-a-Service gang that sold 2FA-proof phishing arrested

July 23, 2021 - Dutch police arrested members of a group calling themselves the Fraud Family for developing and selling phishing panels.

Privacy

5 years for swatter who caused a man’s death for a Twitter handle

July 22, 2021 - We look at the history of doxing and swatting, and talk about the most recent awful example of someone losing their life to this tactic.