Back Cyberpress

Threat Actors Impersonate Malwarebytes to Steal User Login Credentials

Cyberpress • January 19, 2026

While this text file plays no direct role in the attack , it serves as a valuable tracking tool for security researchers investigating the campaign's ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Threat Actors Impersonate Malwarebytes to Steal User Credentials A malware campaign has emerged that deceives users into downloading fake Malwarebytes software, jeopardizing their login credentials and cryptocurrency wallets. This operation was active from January 11 to January 15, 2026, utilizing ZIP files that mimic legitimate Malwarebytes installers. 3 sources 36

Extracted Entities

Companies (1)

Malwarebytes