Advertisement

Malware targeting Facebook profiles on Chrome, Firefox detected

Facebook users, especially those accessing the service on Chrome and Firefox browsers, here's something that you ought to take note of. 

Advertisement
Anuradha Shetty|May 13, 2013, 08:09:30 IST

Facebook users, especially those accessing the service on Chrome and Firefox browsers, here's something that you ought to take note of.

On its Technet blog, Microsoft has revealed that it has received reports about a wave of malware-ridden browser extensions attempting to hijack Facebook profiles. This threat, which they have detected as Trojan:JS/Febipos.A., was first discovered in Brazil. It has been found to be specifically targeting Chrome and Mozilla Firefox.

Advertisement

Do you want ads in your Newsfeed?

Caution!

Detailing on the nature of the malware, Microsoft says that upon installation, the malware tries to update itself using URLs like -

  • Chrome browser - du-pont.info/updates/

  • Mozilla Firefox browser - du-pont.info/updates/

Importantly, updated versions of this malware have been verified too, and have been detected as Trojan:JS/Febipos.A.

At the outset, the Trojan sees if a user is logged in to Facebook at the time. It then tries to get a configuration file from the website -

news-analysisMore from News Analysis
Worryingly, depending on the file, here's what the malware can do any of the following in the Facebook profile of an infected system:
  • Like a page
  • Share
  • Post
  • Join a group
  • Invite friends to a group
  • Chat to friends
  • Comment on a post

The post adds that the configurating file was also found to contain a command to post the following message in Facebook -

GAROTA DE 15 ANOS VÍTIMA DE BULLYING COMETE SUICÍDIO APÓS MOSTRAR OS SEIOS NO FACEBOOK

Vìdeo no link abaixo:

Written in Portuguese, here's what it reads like in English:

Advertisement

15 YEAR-OLD VICTIM OF BULLYING COMMITS SUICIDE AFTER SHOWING HER BREASTS ON FACEBOOK.

Video on the link below:

The link mentioned above is unavailable, and has been blocked. Interestingly, this threat even tries to "like" and "comment" on a Facebook page.

This malware may even post links on Facebook profiles. "At the time this blog was written, there were more users “liking” and “commenting” on the Facebook page that this malware uses – so there’s a possibility that there are more people continuing to be infected," the post notes.

As Microsoft got down to analysing this malware, the number of Facebook page likes, shared link likes and number of comments grew.

When they began analysis, the numbers were - 
  • Facebook page likes: 2,746
  • Facebook shared link likes: 167
  • Number of comments: 165
Hours later it had risen to:
  • Facebook page likes: 3,177
  • Facebook shared link likes: 201
  • Number of comments: 183
Handpicked stories, in your inbox
Global stories. Indian perspective. Zero noise.
No Spam. Unsubscribe Any Time.
First Published:May 13, 2013, 08:09:30 IST
Advertisement
Advertisement
Trending Stories

China's Kimi K3 challenges US AI leaders with frontier-level performance at lower cost

Chinese artificial intelligence startup Moonshot AI has unveiled its latest open-weight AI model, Kimi K3, with early results suggesting it could compete with some of the world's most advanced AI systems developed by leading US companies
2 min read
Advertisement
Advertisement
Up Next