Top all-time · #441
Malwarebytes
Company blog · blog.malwarebytes.com/blogsecurity
Malwarebytes is the company blog at blog.malwarebytes.com, writing about security. Since 2016, 127 different Hacker News readers have linked it 150 times, most often “GrayKey iPhone unlocker poses serious security concerns”. It is still writing: the last post was on 2026-11-02, and you can follow it by feed.
The Security Blog From Malwarebytes
Most-linked posts?
- GrayKey iPhone unlocker poses serious security concerns8 people · 8 mentions · first linked 2018-03-15
- /threat-analysis/2016/09/transmission-hijacked-again-to-spread-malware/5 people · 5 mentions · first linked 2016-11-14
- New Mac backdoor using antiquated code4 people · 4 mentions · first linked 2017-01-18
- Barcode scanner app on Google Play infects 10M users with one update3 people · 3 mentions · first linked 2021-02-07
- New cryptomining exploit uses your resources even after the browser is closed3 people · 3 mentions · first linked 2017-11-30
- Web skimmer hides within EXIF metadata, exfiltrates credit cards via image files2 people · 2 mentions · first linked 2020-06-26
- Malwarebytes Analysis of Checkm8 iOS Bootrom Exploit2 people · 2 mentions · first linked 2019-09-27
- /101/2017/10/out-of-character-homograph-attacks-explained/2 people · 2 mentions · first linked 2018-12-17
- /cybercrime/2016/03/first-mac-ransomware-spotted/2 people · 2 mentions · first linked 2016-10-31
- Clubhouse under scrutiny for sending data to Chinese servers2 people · 2 mentions · first linked 2021-02-17
What Hacker News says?
Eeks, this should be communicated better, though to be fair, IF there was any malware with a tampered signature, you wouldn’t want it to run just because your network was unplugged. How would you prevent something like [0]? I think all the game consoles regularly verify downloaded games too. [0] https://blog.malwarebytes.com/threat-analysis/2016/09/transm...
Comment linking /threat-analysis/2016/09/transmission-hijacked-again-to-spread-malware/
on “macOS unable to open any non-Apple application”Submitted FCC: TikTok is unacceptable security risk and should be removed from app stores as a story · 835 points
HN discussionI'm a very techy person and I interact with modals as little as possible, even if that means ignoring a chunk of my screen. I have a probably-unreasonable sense that it's only going to trigger a bunch of JS or something unsafe [1]. [1]: https://archive.is/TZ7oe was the best, but is kinda dead now. https://blog.malwarebytes.com/threat-analysis/2016/01/clickj...
Comment linking /threat-analysis/2016/01/clickjacking-campaign-plays-on-european-cookie-law/
on “Tech-savvy audiences block Google Analytics”Submitted Barcode scanner app on Google Play infects 10M users with one update as a story · 819 points
HN discussionOh nonsense, that was well established to be an edit of the binary. It’s obvious the GRU didn’t have the source code. The idea that this was an example of the GRU working with criminal hackers is plainly ridiculous. https://blog.malwarebytes.com/threat-analysis/2017/06/eterna... Why call it diskcoder.c anyway? It’s Petya
Comment linking /threat-analysis/2017/06/eternalpetya-yet-another-stolen-piece-package/amp/?__twitter_impression=true
on “DarkSide ransomware gang quits after servers, Bitcoin stash seized”Submitted Zoom zero-day discovery as a story · 521 points
HN discussionI just helped someone remove the built-in Chinese malware from a US Government provided phone. It's insane. https://blog.malwarebytes.com/android/2020/07/we-found-yet-a...
Comment linking /android/2020/07/we-found-yet-another-phone-with-pre-installed-malware-via-the-lifeline-assistance-program/
on “Lithuania says throw away Chinese phones due to censorship concerns”Submitted New Mac ransomware spreading through piracy as a story · 390 points
HN discussionThis is simply not true. People do care about online privacy, and they care more than they used to. I care about my privacy, but the steps I can take to protect it are inadequate. I am in the vast majority (97%) according to this survey: https://blog.malwarebytes.com/security-world/2019/03/labs-su... Here are some numbers from the article: An overwhelming majority of respondents (96 percent) feel that online privacy…
Comment linking /security-world/2019/03/labs-survey-finds-privacy-concerns-distrust-of-social-media-rampant-with-all-age-groups/
on “Chrome extension manifest v3 proposal: comment from uBlock Origin author”Submitted GrayKey iPhone unlocker poses serious security concerns as a story · 310 points
HN discussionApple pulled FB's enterprise cert a while back, basically pulling FB's internal apps offline. I don't think it's a huge leap to pulling the app from the App Store if it comes down to it. In fact, I'd argue that pulling the cert was a shot across FB's bow: "oh, you think we don't have the balls, do you? Anything else you think we don't have the testicular fortitude for?" https://blog.malwarebytes.com/security-world/2…
Comment linking /security-world/2019/01/apple-pulls-facebook-enterprise-certificate/
on “Facebook is pushing back on Apple’s new iPhone privacy rules”Submitted Google’s Nest fiasco harms user trust and invades their privacy as a story · 242 points
HN discussionMost people in crypto aren't remotely knowledgeable about bitcoin: luring in rubes is almost the entirety of the crypto industry's thesis, not to mention comprising it's (actual) market cap. To wit: the wallet-drainer billboards that popped up around the NFT NYC and Eth Nyc conferences this year: https://blog.malwarebytes.com/scams/2022/06/rogue-cryptocurr...
Comment linking /scams/2022/06/rogue-cryptocurrency-billboards-go-phishing-for-wallets/
on “What's the deal with all those weird wrong-number texts?”Submitted macOS 11’s hidden security improvements as a story · 235 points
HN discussionhttps://blog.malwarebytes.com/cybercrime/2016/03/first-mac-r...
Comment linking /cybercrime/2016/03/first-mac-ransomware-spotted/
on “The No More Ransom Project”Submitted Indian threat actor Patchwork APT caught in its own web as a story · 140 points
HN discussionYou may remember an incident with Transmission recently. That was a bundled mac ransomware. https://blog.malwarebytes.com/cybercrime/2016/03/first-mac-r...
Comment linking /cybercrime/2016/03/first-mac-ransomware-spotted/
on “The No More Ransom Project”Submitted Internet Explorer zero-day as a story · 135 points
HN discussionhttps://blog.malwarebytes.com/mac/2019/08/unprecedented-new-... . https://www.cnet.com/news/google-researcher-demonstrates-iph...
Comment linking /mac/2019/08/unprecedented-new-iphone-malware-discovered/
on “Cydia, the original app store, sues Apple on antitrust grounds”Submitted We found a phone with pre-installed malware via the Lifeline Assistance program as a story · 123 points
HN discussion> We've just shifted from "quiet, persistent threat" to "hacker announces to the world that he's in". Changing javascript on a prod website is going to trigger alarms. While I'd like that to be true, it really isn't. There have been loads of card skimming operations injected into production sites which weren't noticed for sometimes months.[0][1][2][3] [0]: https://blog.malwarebytes.com/hacking-2/2020/03/criminals-ha…
Comment linking /hacking-2/2020/03/criminals-hack-tupperware-website-with-credit-card-skimmer/
on “Using HTTP Basic Auth in 2022”Submitted US government-funded phones come pre-installed with unremovable malware as a story · 117 points
HN discussionSoon that's how Microsoft apps will look like - https://blog.malwarebytes.com/wp-content/uploads/2012/10/Ad8...
Comment linking /wp-content/uploads/2012/10/Ad8.png
on “Microsoft is testing ads in the Windows 11 File Explorer”Submitted Android emulator abused to introduce malware onto PCs as a story · 116 points
HN discussionI believe he's saying P(bad if signed) < P(bad if not signed) - "I trust signed apps more than unsigned apps". I'm saying, maybe, but I'm not sure, and Cost * P(bad if signed) may be much worse than Cost * P(bad if not signed). When the Transmission bittorrent client site was hacked to distribute ransomware, it was signed using an unrelated certificate that was likely stolen. This happened twice within a year, with…
Comment linking /threat-analysis/2016/09/transmission-hijacked-again-to-spread-malware/
on “Notepad++ drops code signing for its releases”Submitted Malwarebytes Analysis of Checkm8 iOS Bootrom Exploit as a story · 76 points
HN discussionGivent the recent track records of many fishy apps on the PlayStore, I'll take my risk with the OSS of FDroid. https://www.zdnet.com/article/phony-android-security-apps-in... https://blog.malwarebytes.com/cybercrime/2017/11/new-trojan-... https://thehackernews.com/2017/12/google-playstore-malware.h... https://thenextweb.com/hardfork/2018/04/20/google-play-crypt...
Comment linking /cybercrime/2017/11/new-trojan-malware-discovered-google-play/
on “De-Googling my phone”Submitted The worm that spreads WanaCrypt0r as a story · 41 points
HN discussionArticles: https://motherboard.vice.com/en_us/article/massive-gmail-goo... https://www.theverge.com/2017/5/3/15534768/google-docs-phish... https://blog.malwarebytes.com/cybercrime/2017/05/google-docs...
Comment linking /cybercrime/2017/05/google-docs-app-spam-goes-phishing/
on “Ask HN: Google Doc email virus?”Submitted Web skimmer hides within EXIF metadata, exfiltrates credit cards via image files as a story · 27 points
HN discussion
