> A week in security (January 19 – January 25)

Last week on Malwarebytes Labs: Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why? Fake LastPass maintenance emails target users Under Armour ransomware breach: data of 72 million customers appears on the dark web Can you use too many LOLBins to drop some RATs? Malicious Google Calendar invites could expose private data Fake extension crashes browsers to trick users into infecting themselves Google will pay $8.25m to settle child data-tracking allegations Firefox joins Chrome and Edge as sleeper extensions spy on users On the ThreatDown blog: How to prevent a rootkit attack Stay safe! We don’t just report on threats—we remove them Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.