Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts
2026-07-03T20:51:50Z•7d244aea7f5a2dc82787cfd6f02681eb82c26f9f6ae52692e5edf66cb974541d
applebrowser-extensionsbrowser-vulnerabilitieschromeclickjackingedge-extensionsffmpeghide-my-emailinfostealermacOSmalwaremicrosoft-account-theftperplexity-extensionphishingpixelSmashscamssession-hijackingsocial-engineeringthreat-intelwinrar
What happened
A Malwarebytes feed summarizing multiple active threats and widespread vulnerabilities: malicious Verified X ads delivering macOS malware; ConsentFix campaigns stealing Microsoft accounts; ClickFix phishing using fake Google/Cloudflare verification pages to drop infostealers and a new loader; fake Chrome/Edge extensions spying on users or delivering malware; a serious WinRAR vulnerability; a critical FFmpeg (PixelSmash) flaw; and large Chrome updates that fix numerous critical browser bugs. The collection also highlights social-engineering scams (job/renewal/parcel mule) and privacy issues (aff
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 7d244aea7f5a2dc82787cfd6f02681eb82c26f9f6ae52692e5edf66cb974541d
- Enrichment time
- 2026-07-03T20:51:50Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.