A week in security (January 19 – January 25)
26 January 2026 at 09:01
Last week on Malwarebytes Labs:
- Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why?
- Fake LastPass maintenance emails target users
- Under Armour ransomware breach: data of 72 million customers appears on the dark web
- Can you use too many LOLBins to drop some RATs?
- Malicious Google Calendar invites could expose private data
- Fake extension crashes browsers to trick users into infecting themselves
- Google will pay $8.25m to settle child data-tracking allegations
- Firefox joins Chrome and Edge as sleeper extensions spy on users
On the ThreatDown blog:
Stay safe!
We donβt just report on threatsβwe remove them
Cybersecurity risks should never spread beyond a headline. Keep threats off your devices byΒ downloading Malwarebytes today.