A week in security (April 13 – April 19)
2026-04-20T08:51:52Z•66f0cbceed1f9b5e436de9c0e4a25e5e0a519388422ddcc00e3bea0e06c14230
RATadobe-readercredential-theftdata-breachfake-sitesinfostealermac-malwaremalspamomnistealerphishingplugxpush-notification-abuseransomwareremote-access-trojansocial-engineeringsupply-chain-malwaretrojanized-installerzero-day
What happened
Malwarebytes Labs (Apr 2026) roundup covering widespread phishing and social‑engineering campaigns, trojanized installers and fake sites that deploy remote access tools and PlugX, and prolific Windows infostealers (including Omnistealer variants) that target credentials, crypto wallets and password managers. The month also includes active zero‑day exploitation (notably an Adobe Reader bug), a Patch Tuesday fixing two zero‑days, high‑impact data leakage (Booking.com guest data, NSFW app leaks), and new macOS infection techniques (ClickFix via Script Editor). Attack vectors observed: email/SMS l
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 66f0cbceed1f9b5e436de9c0e4a25e5e0a519388422ddcc00e3bea0e06c14230
- Enrichment time
- 2026-04-20T08:51:52Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.