A week in security (April 27 – May 3)
2026-05-04T08:51:50Z•8d040aae83f2cfa310043d9979208360eaf9bd082fff934ac15a6b21c1971b43
Claude DesktopMicrosoftPhantomRPCRobloxSMS fraudUK Biobankaccount takeoversactively exploitedbrowser takeovercPaneldata leakiOS vulnerabilitymacOS spywaremalwarephishingprivacysupply-chain/malicious-downloadstech support scamtrojanized installerwebsite takeover
What happened
Malwarebytes published a multi-article security roundup (Apr 20–May 4, 2026) covering several high-impact incidents: an actively exploited cPanel/WHM bug enabling website takeover, widespread account theft (Roblox, trojanized Google Antigravity installers), malware that hands browsers to attackers, PayPal email hijacks used to drive tech-support scams, a fake CAPTCHA/SMS-billing scam, a 500k-record UK Biobank data exposure listed for sale, claims of spyware in Claude Desktop on macOS, an iOS bug exposing deleted notifications, and a researcher report on PhantomRPC that Microsoft does not plan
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 8d040aae83f2cfa310043d9979208360eaf9bd082fff934ac15a6b21c1971b43
- Enrichment time
- 2026-05-04T08:51:50Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.