FacexWorm Spreads via Facebook Messenger, Malicious Chrome Extension

guest · Apr 30, 2018

FacexWorm Spreads via Facebook Messenger, Malicious Chrome Extension
April 30, 2018
https://www.bleepingcomputer.com/ne...acebook-messenger-malicious-chrome-extension/

This new strain was spotted in late April by Trend Micro researchers and appears to be related to two other Facebook Messenger spam campaigns, one that took place last August, and another one from December 2017, the latter spreading the Digmine malware.
How FacexWorm spreads and infects users
The infection chain has remained the same and usually starts with users receiving link spam via Facebook Messenger.

Clicking the link leads users to a web page mimicking YouTube, which tries to trick the user into installing a YouTube-themed Chrome extension.
FacexWorm redirects users to scam pages
Second, the rogue FacexWorm extension automatically redirects users to a web page pushing a cryptocurrency scam, asking users to send over a small Ether sum to verify their account.
Crooks also tried to make money via referral URLs
Last but not least, when users try to access certain sites, the FacexWorm rogue extension also redirects users to referral URLs, which is another way in which the malware authors are earning money via their infected hosts.
Click to expand...

Log in or Sign up

FacexWorm Spreads via Facebook Messenger, Malicious Chrome Extension

guest Guest

Log in or Sign up

FacexWorm Spreads via Facebook Messenger, Malicious Chrome Extension

guest Guest

Useful Searches