Wikipedia’s AI agent row likely just the beginning of the bot-ocalypse
2026-04-02T08:51:57Z•55f9765846aba9644ce91e41c0d0cd92fc3691f0324bb4a5b1a6c4b19f98bc33
account-takeoveraxiosbrowser-extensioncisa','apple','google','security-featuresclickfixfake-app-storefbifraudfriendlydealerglassworminfiniti-stealerinfostealermacosmalwarenpmphishingpython-nuitkaratremote-access-trojansignalsocial-engineeringsupply-chainvenom-stealervirtual-phoneswhatsapp
What happened
Malwarebytes Labs roundup highlighting multiple active threats and defensive changes: a WhatsApp-on-Windows campaign attempting persistent access; an axios npm supply‑chain compromise that dropped a RAT; fake Avast scans distributing Venom Stealer; a new macOS infostealer (Infiniti Stealer/NukeChain) abusing ClickFix and Python/Nuitka; GlassWorm browser‑extension surveillance; widespread messaging‑app account takeover campaigns flagged by FBI/CISA; and scam trends including fake app stores (FriendlyDealer) and rented virtual phones to bypass bank fraud checks. Coverage also notes vendor/OS and
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 55f9765846aba9644ce91e41c0d0cd92fc3691f0324bb4a5b1a6c4b19f98bc33
- Enrichment time
- 2026-04-02T08:51:57Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.