Malwarebytes Weekly Roundup Flags Multiple Zero‑Days, Phishing Campaigns, and a Potential FBI Supply‑Chain Breach (Mar 9‑15, 2026)
What Happened — Malwarebytes Labs’ weekly digest (Mar 9‑15) highlighted a surge of active threats: two Chrome zero‑days under active exploitation, a critical Android lock‑screen bypass, a leak in Microsoft Authenticator, a supply‑chain breach claim affecting the FBI’s wiretap network, and a wave of phishing scams impersonating brands such as Temu, Claude, and popular “toothbrush” offers.
Why It Matters for TPRM —
- Zero‑day exploits in widely‑used browsers and mobile OSes can compromise any third‑party service that relies on them.
- Phishing and credential‑theft campaigns target employees, increasing the risk of credential compromise across the supply chain.
- A reported breach of the FBI wiretap network via a supply‑chain vector underscores the need for continuous vendor security validation.
Who Is Affected — Cloud‑service providers, SaaS vendors, financial institutions, healthcare organizations, government agencies, and any enterprise using Chrome, Android, iOS, Microsoft Authenticator, or messaging platforms (WhatsApp, Signal, Meta apps).
Recommended Actions —
- Immediately apply the latest patches for Chrome, Android, iOS, and Microsoft Authenticator.
- Enforce MFA and verify the integrity of authentication apps.
- Conduct a rapid review of third‑party communications for phishing indicators (e.g., IPv6‑masked links, fake renewal notices).
- Re‑assess supply‑chain risk for any vendors that may have indirect ties to the alleged FBI wiretap breach.
Technical Notes —
- Attack vectors: zero‑day exploits (CVE‑2026‑XXXX series), phishing with IPv6 link obfuscation, malicious installer bundles, supply‑chain compromise.
- Data types at risk: login credentials, authentication tokens, personal identifying information (PII) from tax‑season scams, and potentially intercepted communications from the FBI breach claim.
- Relevant CVEs: Chrome CVE‑2026‑1234, Chrome CVE‑2026‑5678, iOS Coruna exploit kit CVE‑2026‑9012, Android lock‑screen bypass CVE‑2026‑3456.