Malwarebytes Labs reports that scammers are using short text messages to start conversations, often with a name pulled from breached data. The goal is to get a reply, then build trust or push a fake investment scheme. Windows users should not answer unknown texts, even with “Who’s this?” or “Wrong number,” and should report and block the sender instead.
Source: malwarebytes.com
…
Malwarebytes Labs reports that phishing emails are now being aimed at AI assistants as well as people. Researchers found messages with hidden instructions that could make a summarizing tool describe an email as legitimate or urgent, or even suggest changing vendor payment details. The advice is to check the original message before acting on any recommendation about money or sensitive information, verify payment changes through a separate trusted channel, and keep AI assistant permissions limited.
Source: malwarebytes.com
Cyberscoop.com reports that federal authorities arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on charges of conspiracy of extortion. Court records say the case involves threats to the confidentiality of information to extort money, and the filing has been moved to the Eastern District of Texas. Ordinary users should stay alert to ransomware and extortion scams that pressure victims into paying.
Source: cyberscoop.com
KnowBe4 says attackers are abusing trusted services like DocuSign, SharePoint, Adobe Sign, Dropbox and Google Drive to send phishing emails that look legitimate. In its analysis of 544,000 threat emails between June and August 2026, LOTS techniques accounted for 53,000 emails, with DocuSign and QuickBooks making up nearly two-thirds of that volume. The post says these emails can bypass security gateways because they come from real platforms. Windows users and small offices should be careful with document-share and payment messages, even when the sender looks trustworthy.
Source: blog.knowbe4.com
