A week in security (April 20 – April 26)

2026-04-27T08:52:10Z26f59bc9c5b0f1a427e0baa6608a88132191db0b60ebc505e6ebb728b9db9aa8
ai-abuseandroid-privacybooking-combrowser-hijackcredential-theftdata-breachfake-installerios-vulnerabilitymacos-spywaremalwaremarketplace-listingmedical-dataphishingpush-notificationsremote-access-trojansupply-chaintech-support-scamtrojan

What happened

Malwarebytes weekly roundup (Apr 20–26, 2026) covering multiple high-impact privacy and malware incidents: medical data for ~500,000 UK Biobank volunteers listed for sale on Alibaba; Booking.com guest reservation data exposure; an iOS vulnerability (now patched) that allowed recovery of deleted notifications including Signal previews; multiple trojanized/fake installers (malicious TradingView AI agent site, fake Google Antigravity, fake Slack, DHL-themed shipment lures) distributing browser takeover malware, credential stealers and remote-access/backdoor tools; a researcher claim that Claude (

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
malwarebytes_labs
Record identifier
26f59bc9c5b0f1a427e0baa6608a88132191db0b60ebc505e6ebb728b9db9aa8
Enrichment time
2026-04-27T08:52:10Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.