Lightnews — Scholar-powered news

Scammers are still sending us their fake Robinhood security alerts

Malwarebytes @malwarebytes.com · 3h

Scammers are sending fake Robinhood security alerts like it's 2021.

Fake alerts claim your Robinhood account is at risk. The link leads to a convincing copy of the site—but it’s built to steal your login.

Satellites leak voice calls, text messages and more

2

Malwarebytes @malwarebytes.com · 9h

Scientists from several US universities managed to pick up unencrypted satellite signals using just everyday equipment on a campus rooftop.

Scientists have revealed a gaping hole in global telecom security, intercepting personal and business data from geostationary satellites.

Pixel-stealing “Pixnapping” attack targets Android devices

Malwarebytes @malwarebytes.com · 1d

Microsoft is testing AI facial recognition for your photos in OneDrive.

The feature is enabled for those with early access.

You can easily turn this off...but only 3 times a year. (wut?)

Toggle this off in Privacy and Permissions.

2 4

Malwarebytes @malwarebytes.com · 1d

Imagine if a rogue app could glimpse tiny bits of your screen—even the parts you thought were secure, like your 2FA codes.

Imagine if a rogue app could glimpse tiny bits of your screen—even the parts you thought were secure, like your 2FA codes.

Researchers break OpenAI guardrails

3

Malwarebytes @malwarebytes.com · 1d

The maker of ChatGPT released a toolkit to help protect its AI from attack earlier this month. Almost immediately, someone broke it.

The maker of ChatGPT released a toolkit to help protect its AI from attack earlier this month. Almost immediately, someone broke it.

AI-driven scams are preying on Gen Z’s digital lives

2

Malwarebytes @malwarebytes.com · 1d

Read our report.
www.malwarebytes.com/blog/news/20...

Gone are the days when extortion was only the plot line of crime dramas—today, these threatening tactics target anyone with a smartphone, especially Gen Z.

Phishing scams exploit New York's inflation refund program

Malwarebytes @malwarebytes.com · 1d

⚠️ Scammers are using AI-powered threats to make extortion more convincing than ever—and Gen Z is in the crosshairs.

Deepfakes, cloned voices, sextortion & fake kidnappings are causing emotional and financial damage to digital native's lives.

Link in comments for more.

1 2 2

Malwarebytes @malwarebytes.com · 1d

Scammers are texting residents, urging them to “verify payment details” to claim their refund.

Scammers are texting residents, urging them to “verify payment details” to claim their refund.

Your passwords don't need so many fiddly characters, NIST says

Malwarebytes @malwarebytes.com · 2d

It’s once again time to change your passwords, but if one government agency has its way, this might be the very last time you do it.

There are new rules for your password—and the passwords of your employees. Read NIST's latest guidance on password security.

Discord customer info stolen in data breach — how to stay safe

Malwarebytes @malwarebytes.com · 4d

⚠️ Heads up, Discord users. A recent data breach may have put your info at risk.

Learn how the attackers gained access and learn how to protect your data with our research featured in Tom's Guide.

Data was accessed through a third-party customer support company

www.tomsguide.com

1

Malwarebytes @malwarebytes.com · 5d

Apple is pushing back on a Texas age verification law that would require app stores to collect, store, and manage your personal data.

Apple voices concerns over age-check law that could put user privacy at risk

The more sensitive data that companies have to collect and store, the greater the consequences for users if it’s breached.

Millions of (very) private chats exposed by two AI companion apps

Malwarebytes @malwarebytes.com · 5d

Hi! We don't have any active blocks on internet archive. Make sure your browser extension is up to date with the latest database.

If you continue to experience issues, please DM us and we'll connect you with our support team.

Malwarebytes @malwarebytes.com · 5d

Another day, another AI app leaking your data.

Two AI "girlfriend" apps have blabbed millions of intimate conversations from more than 400,000 users.

Fake VPN and streaming app drops malware that drains your bank account

1 3

Malwarebytes @malwarebytes.com · 6d

Android users, make sure you use a VPN you can trust.

A fake Android VPN is spreading Klopatra banking trojan, giving attackers full control of your infected device.

Mobdro Pro IP TV + VPN hides Klopatra, a new Android Trojan that lets attackers steal banking credentials.

California just put people back in control of their data

2 4

Malwarebytes @malwarebytes.com · 6d

California passed 14 new privacy and AI related bills this year.

Will additional states follow their lead?

California just passed 14 new privacy and AI laws. We're highlighting a few that give users real control over their personal data.

One stolen iPhone uncovered a network smuggling thousands of devices to China

1

Malwarebytes @malwarebytes.com · 6d

If you think Apple’s ‘Find My’ feature was just there to help you locate your phone when it slipped down the side of the couch, think again. It turns out this service also assists law enforcement in capturing criminals.

Turns out Apple’s ‘Find My’ feature isn’t just for when your phone slips down the side of the couch.

Modeling scams see mature models as attractive new prospects

1 4

Malwarebytes @malwarebytes.com · 6d

Scammers assume that older adults have more savings and less debt. They may also exploit social isolation and unfamiliarity with technology and online risks. This makes seniors appealing targets, especially for scams promising lucrative opportunities such as modeling contracts or paid photoshoots.

Modeling scammers are reinventing old tricks for the social media age—targeting not just the young, but older adults too.

What's there to save about social media? (feat. Rabble)

1 4

Reposted by Malwarebytes

revolution.social Podcast @revolution.social · 8d

Our host, @rabble.nz, joined @malwarebytes.com's Lock and Code podcast to talk about what’s still good in social media and what’s being done to preserve it.

Listen to Rabble and host @davidalruiz.bsky.social on Apple, Spotify, or wherever you get your podcasts: podcasts.apple.com/us/podcast/w...

Podcast Episode · Lock and Code · 10/05/2025 · 50m

podcasts.apple.com

3 6

Malwarebytes @malwarebytes.com · 7d

🚨 Scammers are targeting crypto users by impersonating popular wallet apps like Best Wallet.

Learn how to protect your assets and spot the latest scam with our latest research. 🔒

Don’t connect your wallet: Best Wallet cryptocurrency scam is making the rounds

A text message tried to lure us to a fake Best Wallet site posing as an airdrop event to steal our crypto.

Is your computer mouse eavesdropping on you?

Malwarebytes @malwarebytes.com · 7d

Researchers at the University of California found a method they called Mic-E-Mouse, which turns your computer mouse into a spy that can listen in on your conversations.

Researchers have found a method they called Mic-E-Mouse, which turns your computer mouse into a spy that can listen in on your conversations.

“Can you test my game?” Fake itch.io pages spread hidden malware to gamers

1 3

Malwarebytes @malwarebytes.com · 7d

What seems like a harmless game test could turn into a fight against future malware, as a hidden loader silently unlocks the door for follow-up malware.

One click, total mess. A convincing itch-style page can drop a stealthy stager instead of a game. Here’s how to spot it and what to do if you clicked.

Troops and veterans' personal information leaked in CPAP Medical data breach

Malwarebytes @malwarebytes.com · 8d

Over 90,000 patients impacted: Jacksonville-based CPAP Medical Supplies and Services Inc. suffered a data breach in December 2024, compromising sensitive patient information.

The leak exposed the names, Social Security numbers, and health details of more than 90,000 military patients, troops, veterans, and their families.

Discord warns users after data stolen in third-party breach

1

Malwarebytes @malwarebytes.com · 8d

Discord has confirmed a data breach — but not directly on its own systems. A third-party customer support provider was compromised, exposing Discord user data. The platform itself wasn’t hacked, but the impact still falls on its users.

The stolen data includes names, emails, limited billing information, and some government-ID images.

Phishers target 1Password users with convincing fake breach alert

3 5

Malwarebytes @malwarebytes.com · 8d

⚠️ Stay alert: Cybercriminals are targeting 1Password users with a new phishing campaign.

Protect yourself by avoiding suspicious links and never sharing your credentials.

For more info and safety tips, read our latest research. 👇

Attackers are using realistic-looking 1Password emails to trick users into handing over their vault logins.