MALWAREBYTES’ weekly round-up, published on 7 September 2026, lists security stories published between 31 August and 6 September. Topics included password-reset attacks reportedly linked to the rollout of X Money; streaming boxes whose apps may route criminal traffic through users’ home connections; and StreamRat, an Android banking Trojan promoted through Meta and TikTok adverts. Malwarebytes said the StreamRat campaign exposed roughly 570,000 people to the malware, which can take control of infected phones.
The round-up also covered two critical Chrome flaws affecting people who visit malicious websites, a dark-web platform allegedly offering more than 153 million driving licences and additional identity documents, and a cyber incident confirmed by McKesson after the ShinyHunters group claimed it had stolen patient data.
Other listed subjects included infostealers hijacking Claude accounts, a fake GTA 6 leak designed to drain cryptocurrency wallets, and TerminalFix, a ClickFix-like attack delivering a different payload. The article is an index of linked reports and does not provide further technical detail, evidence or remediation guidance for these incidents.