Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs AI Malicious Google Calendar invites could expose private data January 21, 2026 – Researchers showed how prompt injection hidden in a calendar invite can bypass privacy controls and turn an AI assistant into a data-leaking accomplice. News Can you use too many LOLBins to drop some RATs? News Fake extension crashes browsers to trick users into infecting themselves Family and parenting Google will pay $8.25m to settle child data-tracking allegations News Firefox joins Chrome and Edge as sleeper extensions spy on users Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE BUSINESS BLOG Business Discover the tools, insights, and advice you need to protect your organization. EXPLORE PERSONAL BLOG Personal Get the security news and tips to help you and your family stay safe. EXPLORE PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES Can you use too many LOLBins to drop some RATs? Pieter Arntz January 21, 2026 0 Comments An attempt to drop two RATs on a system used an uncanny assortment of legitimate Windows tools. Malicious Google Calendar invites could expose private data Pieter Arntz January 21, 2026 0 Comments Researchers showed how prompt injection hidden in a calendar invite can bypass privacy controls and turn an AI assistant into a data-leaking accomplice. Fake extension crashes browsers to trick users into infecting themselves Pieter Arntz January 20, 2026 0 Comments A fake ad blocker crashes your browser, then uses ClickFix tricks to make you run the malware yourself. Google will pay $8.25m to settle child data-tracking allegations Danny Bradbury January 20, 2026 0 Comments Google-owned AdMob allegedly collected kids' data for ads without parental consent—including IP addresses, usage data, and exact locations. Firefox joins Chrome and Edge as sleeper extensions spy on users Pieter Arntz January 19, 2026 0 Comments Researchers found more sleeper browser extensions that spy on users and install backdoors, this time targeting Firefox users as well. A week in security (January 12 – January 18) Malwarebytes Labs January 19, 2026 0 Comments Last week on Malwarebytes Labs: Stay safe! WhisperPair exposes Bluetooth earbuds and headphones to tracking and eavesdropping Pieter Arntz January 16, 2026 0 Comments Researchers demonstrated WhisperPair, a set of attacks that can take control of many widely used Bluetooth earbuds and headphones without user interaction. Dutch police sell fake tickets to show how easily scams work Danny Bradbury January 16, 2026 0 Comments A fake ticket website that ended with a digital finger-wag showed just how many people still fall for concert and sports ticket scams. “Reprompt” attack lets attackers steal data from Microsoft Copilot Pieter Arntz January 15, 2026 0 Comments Researchers uncovered a way to steal data from Microsoft Copilot users with a single malicious link. 1 2 3 … 597 Next Contributors Threat Center Podcast Glossary Scams
