@White_Rabbit ~ Re Malwarebytes.
About 3 or 4 years back, Sophos released it's routine update with the insignificant caveat that the Sophos realtime process was flagged as it's own enemy.
International mayhem ensued. Much of our IT team's time wasted. Good times.
Ouch, that sucks. I read about the Malwarebyte issue, but personally don't use that product in the corporate environment.
I do recall reading Krebs complaining about the issue and thought it was originally caused by cryptominers.
@White_Rabbit - mentioned a few days back somewhere that for a decade we added Malwarebytes to each PC build (clients only) in non-realtime mode. It reliably and regularly caught lots of malware that the corp av missed & cleaned it up nicely without pain. Or cleaned what the corp av quarantined but couldn't clean.