A week in security (November 10 – November 16)

According to Malwarebytes Labs, the week of 10–16 November 2025 covered a string of security incidents and warnings, from phishing and scams to privacy concerns. On 13–14 November, reports highlighted Google’s lawsuit against Lighthouse, a Chinese Phishing-as-a-Service platform that uses Google branding to lure victims, alongside warnings about 1 million victims and 17,500 fake sites linked to toll-fee scammers.

On 13 November, a piece described how a fake invoice in a retro XWorm-shaped scenario demonstrated why .vbs invoices remain suspicious. The same period saw alerts about phishing emails disguised as spam-filter alerts designed to steal logins, urging readers to think twice before engaging with such messages. Also on 14 November, coverage examined Apple’s Digital ID on iPhones, noting travel conveniences but warning of privacy and security trade-offs. Stay tuned for further insights as Malwarebytes Labs continues to round up security news and practical protections.