A week in security (February 1 – February 7)

Last week on Malwarebytes Labs, we dug into a load of security events. We first peered into how Fonix ransomware was giving up the ghost, swearing off a life of crime and even apologizing for past actions. We looked at a credit card skimmer that found opportunity in the latest Magento 1 hacking spree, we warned about the risks of browser sync, and we pondered whether or not real identities make social media safer (spoiler alert: they do not).

Finally, in capping off a busy week, we uncovered a barcode scanner that infected 10 million users with one update, and we wrote about an Android emulator that was abused to introduce malware onto PCs.

Other cybersecurity news

• Phishing campaign shut down: Police tackle “SMS bandits” (Source: Krebs on Security)
• Sharing is (not) caring: Too many workers are oversharing data (Source: Help Net Security)
• Infinite coffee: Smart card hack raises several cups (Source: The Register)
• Scams up, reports down: Worrying research shows victims reluctant to report (Source: SKY News) 
• Emulator targeted by hackers: NoxPlayer updates cause problems for gamers (Source: Teiss)
• CacheFlow extends welcome: Malware lurked for years in popular browser extensions (Source: The Daily Swig)
• Watch out for Office phishing: Scammers are making use of Google’s FireBase to host phishing pages (Source: SCMagazine)
• Over 70s beware: fraudsters have a new target for Covid scams (Source: YourMoney)

Stay safe, everyone!

The post A week in security (February 1 – February 7) appeared first on Malwarebytes Labs.