A week in security (April 20 – April 26)
2026-04-27T08:52:10Z•26f59bc9c5b0f1a427e0baa6608a88132191db0b60ebc505e6ebb728b9db9aa8
ai-abuseandroid-privacybooking-combrowser-hijackcredential-theftdata-breachfake-installerios-vulnerabilitymacos-spywaremalwaremarketplace-listingmedical-dataphishingpush-notificationsremote-access-trojansupply-chaintech-support-scamtrojan
What happened
Malwarebytes weekly roundup (Apr 20–26, 2026) covering multiple high-impact privacy and malware incidents: medical data for ~500,000 UK Biobank volunteers listed for sale on Alibaba; Booking.com guest reservation data exposure; an iOS vulnerability (now patched) that allowed recovery of deleted notifications including Signal previews; multiple trojanized/fake installers (malicious TradingView AI agent site, fake Google Antigravity, fake Slack, DHL-themed shipment lures) distributing browser takeover malware, credential stealers and remote-access/backdoor tools; a researcher claim that Claude (
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 26f59bc9c5b0f1a427e0baa6608a88132191db0b60ebc505e6ebb728b9db9aa8
- Enrichment time
- 2026-04-27T08:52:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.