New web skimmer steals credit card data, sends to crooks via Telegram

Malwarebytes Labs-- The digital credit card skimming landscape keeps evolving, often borrowing techniques used by other malware authors in order to avoid detection. As defenders, we look for any kind of artifacts and malicious infrastructure that we might be able to identify to protect our users and alert affected merchants. These malicious artifacts can range … Continue reading New web skimmer steals credit card data, sends to crooks via Telegram

Apple’s notarization process fails to protect

Malwarebytes Labs-- In macOS Mojave, Apple introduced the concept of notarization, a process that developers can go through to ensure that their software is malware-free (and must go through for their software to run on macOS Catalina). This is meant to be another layer in Apple’s protection against malware. Unfortunately, it’s starting to look like … Continue reading Apple’s notarization process fails to protect

Lock and Code S1Ep14: Uncovering security hubris with Adam Kujawa

Malwarebytes Labs-- This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Adam Kujawa, security evangelist and director of Malwarebytes Labs, about “security hubris,” the simple phenomenon in which businesses are less secure than they actually believe. Ask yourself, … Continue reading Lock and Code S1Ep14: Uncovering security hubris with Adam Kujawa

Good news: Stalkerware survey results show majority of people aren’t creepy

Malwarebytes Labs-- Back in July, we sent out a survey to Malwarebytes Labs readers on the subject of stalkerware—the term used to describe apps that can potentially invade someone’s privacy. We asked one question: “Have you ever used an app to monitor your partner’s phone?”  The results were reassuring. We received 4,578 responses from readers all … Continue reading Good news: Stalkerware survey results show majority of people aren’t creepy

The cybersecurity skills gap is misunderstood

Malwarebytes Labs-- Nearly every year, a trade association, a university, an independent researcher, or a large corporation—and sometimes all of them and many in between—push out the latest research on the cybersecurity skills gap, the now-decade-plus-old idea that the global economy lacks a growing number of cybersecurity professionals who cannot be found. It is, as … Continue reading The cybersecurity skills gap is misunderstood