McAfee Labs
Read McAfee Labs blogs for the latest threat research, threat intelligence, and thought leadership from the Threat Research team.
Malware for Hire: The Story of Marsalek, a Malware-as-a-Service Operation
Nov 04, 2026 | 30 MIN READ
Malware for Hire: The Story of Marsalek, a Malware-as-a-Service Operation
McAfee Labs uncovers Marsalek, a free malware-as-a-service operation spreading through fake game cheats and tools to steal personal information.
Android/RewaFake: Uncovering a Large-Scale Fake Apps Adware Campaign on Google Play
McAfee’s Mobile Research Team identified more than 1,900 unique adware applications associated with the campaign across over 500,000 devices.
Your State’s Scam Reality: What New Research Reveals Across All 50 States
New McAfee research reveals how scams are increasing Americans’ mental load, changing online behavior and creating different risks across all...
WeedHack Returns: How SEO Poisoning is Leading Minecraft Fans to Malware
McAfee Labs found active websites still spreading WeedHack malware to gamers, using fake Minecraft clients, lookalike sites, SEO poisoning, and...
AI Can Find Your Location 91% of the Time Using Just One Photo
How much info can one photo reveal? We put it to the test, and without any geotags or metadata, AI...
Silent Swap: A Crypto Clipper Extension Campaign
Researchers uncover browser extension malware that steals cryptocurrency by swapping wallet addresses during transactions.
Game Over: WeedHack – The Rise of Minecraft Malware-as-a-Service Campaigns
If you or your child plays Minecraft, here's what you need to know about a large-scale malware campaign McAfee Labs...
Sinkholing CountLoader: Insights into Its Recent Campaign
Authored by Harshil Patel and Sakshi Jaiswal McAfee Labs has recently uncovered a large scale CountLoader campaign that uses multiple layers of...
Why Hackers Are Collecting Data They Can’t Read Yet. And How to Stay Safe
Hackers are collecting encrypted data today to decrypt later using quantum computing. Learn what “Harvest Now, Decrypt Later” means and...
Operation NoVoice: Rootkit Tells No Tales
Authored By: Ahmad Zubair Zahid McAfee’s mobile research team identified and investigated an Android rootkit campaign tracked as Operation Novoice....
AI Wrote This Malware: Dissecting the Insides of a Vibe-Coded Malware Campaign
McAfee Labs analyzes a malware campaign using AI-assisted code and fake software downloads. Learn how 440+ malicious ZIP files spread...
Learn to Identify and Avoid Malicious Browser Extensions
In this guide, you will learn about the advantages and security risks of browser extensions, the role...
