Fake Malwarebytes ZIPs, Signed VS Code Stealers, and PDF Backdoors: How Trust, Not Zero-Days, Is Breaching Enterprises
TL;DR
* Malwarebytes Campaign Tricks Users into Downloading Fake Software via DLL Sideloading, Stealing Crypto and Credentials
* Cybercriminals Exploit Visual Studio Code Marketplace with Evelyn Stealer Extension to Steal Source Code and Cloud Tokens
* Microsoft Enforces Intune Security Policies, Blocking Business Email Access for Non-Compliant Apps Since Jan 19, 2026