Last week on Malwarebytes Labs: Italian hotels breached for tens of thousands of scanned IDs National Public Data returns after massive Social Security Number leak Romance scammers in Ghana charged with more than $100 million in theft Netflix scammers target jobseekers to trick them into handing over their Facebook logins Russians hacked US courts, say […]
A week in security (August 11 – August 17) Leggi tutto »
The Computer Emergency Response Team (CERT) for Italy’s “Agenzia per l’Italia Digitale” (AGID) issued a warning that cybercriminals are selling stolen identity documents from hotels operating in Italy. This summer, a criminal hacker group named “mydocs” infiltrated the booking systems of at least ten Italian hotels, stealing high-resolution scans of ID documents, including passports and
Italian hotels breached for tens of thousands of scanned IDs Leggi tutto »
Remember that data broker nobody had ever heard of, but managed to leak a database which contained the data of some 2.9 billion people? It’s back, and this time with a search function. National Public Data suffered an alleged breach in 2024 against a data base that, it turned out, carried 272 million unique social
National Public Data returns after massive Social Security Number leak Leggi tutto »
The Department of Justice (DOJ) extradited and indicted 4 Ghanaian nationals for allegedly stealing more than $100 million, mainly through romance scams and business email compromises. According to a report from Comparitech, nearly 59,000 Americans fell victim to romance scams in 2024, losing an estimated $697.3 million. Our own research from last year showed that
Romance scammers in Ghana charged with more than $100 million in theft Leggi tutto »
In what seems a phishing attack targeted at a certain audience, scammers are impersonating Netflix and reaching out to marketing staff. The initial mail looks like what you might expect from a headhunter or a human resources (HR) recruitment specialist. “I hope this note finds you well,” the email begins. “Your reputation as a visionary
Russia is after secret files in the US court system, according to reports this week—and its hackers appear to have reached at least some of them. Last week, news broke of a successful cyberattack against the decades-old US court filing system. Called Case Management/Electronic Case Files (CM/ECF), courts use the system to file and maintain
Russians hacked US courts, say investigators Leggi tutto »
In the August 2025 patch Tuesday round Microsoft fixed a total of 111 Microsoft vulnerabilities. A few of them are very important for people to apply. Even if you’re not a tech expert, keeping your Windows system up to date is one of the simplest and most effective ways to protect yourself from online threats.
Microsoft patches some very important vulnerabilities in August’s patch Tuesday Leggi tutto »
On July 30, 2025, WinRAR released a new version (7.13 Final) to patch a vulnerability which was used in two separate malware campaigns. WinRAR is a popular file archiving and data compression tool that allows users to compress files into smaller archives, like RAR and ZIP, and can also unpack various archive formats. The vulnerability,
WinRAR vulnerability exploited by two different groups Leggi tutto »
The next time you shake your head at another online scam and vow that you’d never fall for it, remember that even the most tech-savvy people can sometimes slip up. A case in point: Julie-Anne Kearns. This self-made scam-hunter told her story to the Guardian last week, revealing how she had been duped by people
Scam hunter scammed by tax office impersonators Leggi tutto »
Scammers are using the age old tactic of scaring victims into clicking by sending out fake product recall messages from Amazon. The text message tells you that the item does not meet Amazon’s standards, and tries to install some urgency by claiming it is not safe to use. It also includes a link where it
That “Amazon Safety Recall” message may well be a scam Leggi tutto »
