Fake Google Antigravity downloads are stealing accounts in minutes
2026-04-21T20:51:56Z•0ce53f6d199005bb5da7631373543765b582465bb4b8170b3fd2a1a514c6b679
account-takeoveradobe-reader-exploitbrowser-notification-abusecredential-theftdata-breachfake-google-antigravityfake-slackinfostealeromnistealerpatch-tuesdayphishingpushpagandaransomware-deploymentremote-accesstech-support-scamtrojanized-installerzero-day
What happened
Malwarebytes Labs documents a wave of active account-theft and credential-theft campaigns: trojanized installers impersonating legitimate apps (notably fake “Google Antigravity” and Slack installers) deliver remote access/backdoors and infostealers that rapidly hijack accounts and drain crypto; phishing and scam campaigns abuse legitimate notifications and emails (Apple, DHL, iCloud, YouTube copyright) to harvest credentials or push tech-support scams; Pushpaganda turns browser notifications into scam feeds; Omnistealer and other info‑stealers are widespread; stolen Booking.com reservation/gu�
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 0ce53f6d199005bb5da7631373543765b582465bb4b8170b3fd2a1a514c6b679
- Enrichment time
- 2026-04-21T20:51:56Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.