← Back to Feed
A week in security (September 14 – September 20)
September 21, 2026 · Malwarebytes · Severity: CRITICAL
Last week on Malwarebytes Labs: New Android malware uses AI to steal bank logins and PINs Did an AI really try to break free from human control?
Last week on Malwarebytes Labs:
- New Android malware uses AI to steal bank logins and PINs
- Did an AI really try to break free from human control?
- Fake parcel delivery messages steal your card and bank details
- Flock cameras are tracking people as well as cars
- Revolut phishing texts appear days after data breach
- 12 celebrity deepfake websites seized by Manhattan DA
- T-Mobile rewards points expiry texts are a phishing scam
- Google Pixel owners urged to patch actively exploited modem flaw
- AI helps scammers build convincing antivirus renewal pages
- How to opt out of AI chatbot training
- HBO Max’s verified Reddit account hijacked to spread malware
- Meta AI builds detailed profiles of children from years of family posts
- Search results are sending people to fake Bitrefill checkouts
- Google’s new search redirects make links harder to check before you click
- Revolut gave customer IDs and financial data to a government impostor
Stay safe!
Your name, address, and phone number may already be for sale.
Data brokers collect and sell your personal details to anyone willing to pay. Malwarebytes Personal Data Remover finds them and gets your information removed, then keeps watch so it stays that way.
Key Takeaways
- This week's security roundup covers new Android malware using AI to steal bank logins, Flock cameras tracking people, and fake parcel delivery scams.
- Google Pixel owners were urged to patch an actively exploited modem flaw, and 12 celebrity deepfake websites were seized by the Manhattan DA.
- Other stories include Revolut phishing texts after a data breach, AI-powered scam pages, and HBO Max's verified Reddit account being hijacked to spread malware.