A week in security (September 28 – October 4)

Malwarebytes Labs weekly security feed covering phishing and cryptocurrency wallet-draining scams, data breaches exposing sensitive personal and medical records, Apple exploitation, DarkSword attacks, Kothamine malware using Tailscale tailcat for encrypted command and control, ClickFix PowerShell delivery, shadow AI data leakage, privacy risks, and consumer fraud. The most directly actionable threats include exploitation of vulnerable Apple devices, fake crypto reward sites, malware using legitimate remote networking tools for evasion, and social-engineering attacks prompting users to execute-