AI phishkits, domain hijacks, and ASOS and Domino's breaches in Malwarebytes weekly report
The weekly report covers domain hijacking, AI phishing tools, and updates on breaches at ASOS and Domino’s Pizza.
Key points
- Attackers hijacked country-code domains to impersonate major tech services.
- New AI-powered phishkits enable criminals to build account-hijacking tools quickly.
- Google paused its open-source bug bounty program due to a rise in AI-generated submissions.
Malwarebytes Labs published a summary of security events occurring between October 5 and October 11, 2026. The report highlights several distinct threats, including domain impersonation campaigns, automated phishing infrastructure, and ongoing data breaches affecting retail customers.
How are attackers impersonating legitimate services?
According to the Malwarebytes Labs report, attackers have successfully hijacked country-code top-level domains. They use these compromised domains to create convincing impersonations of Google and other major online services. This technique allows threat actors to bypass basic visual checks that users might perform when verifying a website’s authenticity.
What new tools are accelerating phishing attacks?
The publication notes the emergence of AI-powered phishkits that significantly reduce the time required to launch attacks. Criminals can now assemble complete account-hijacking tools in approximately ten minutes. This speed suggests a lowering of the technical barrier for entry, allowing less sophisticated actors to deploy complex social engineering campaigns with minimal effort.
Which companies are experiencing active security incidents?
ASOS reported that hackers stole customer details and shopping search histories. The attackers also sent push notifications directly to customers. Additionally, Domino’s Pizza customers were targeted in credential stuffing attacks, where stolen login credentials are tested against the retailer’s authentication systems to gain unauthorized access.
How is Google responding to AI-driven threats?
Google issued security updates for Android devices, specifying which devices and users are eligible for the patches. Separately, the company paused its open-source bug bounty program. This suspension follows a noticeable rise in submissions generated by artificial intelligence tools, which increased the volume of reports for researchers to triage.
Background: Phishing
This checklist provides actionable technical controls to stop phishing. It covers email authentication, identity hardening, and endpoint detection. Implement these measures to reduce reliance on user training and close common infrastructure vulnerabilities that attackers exploit.
Read the full guide: Phishing Prevention Checklist for Technical Defenses
What to do and how to stay safe: Malwarebytes
- Monitor domain registration records for unexpected changes to critical infrastructure.
- Verify the legitimacy of push notifications and login requests through official channels.
- Enforce multi-factor authentication to mitigate the impact of credential stuffing attacks.
- Review bug bounty submission processes to filter out AI-generated noise.
Step-by-step guide: Browser Security Settings for Small Business Teams
General security guidance from the TechSec Feed newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Did the ASOS breach affect payment information?
The source material states that hackers stole customer details and shopping searches, but does not specify if payment data was compromised.
How long does it take to build the new AI phishkits?
According to the report, criminals can arm themselves with these account-hijacking tools in ten minutes.
Why did Google pause its bug bounty program?
Google paused the program after observing a rise in submissions generated by artificial intelligence tools.
