How a Chinese malware gang defrauded Facebook users of $4 million

guest · Oct 1, 2020

How a Chinese malware gang defrauded Facebook users of $4 million
SilentFade group utilized a Windows trojan, browser injections, clever scripting, and a Facebook platform
October 1, 2020
https://www.zdnet.com/article/how-a-chinese-malware-gang-defrauded-facebook-users-of-4-million/

At the Virus Bulletin 2020 security conference today, members of the Facebook security team have disclosed more details about one of the most sophisticated malware operations that has ever targeted Facebook users.

Known internally at Facebook as SilentFade, this malware gang was active between late 2018 and February 2019, when Facebook's security team detected their presence and intervened to stop their attacks.
The purpose of SilentFade's operations was to infect users with the trojan, hijack the users' browsers, and steal passwords and browser cookies so they could access Facebook accounts.
Click to expand...

Despite operating only for a few months, Facebook said the group managed to defraud infected users of more than $4 million, which they used to post malicious Facebook ads across the social network.
They used URL shorteners and images of celebrities to lure users on sites selling shady products, such as weight loss products, keto pills, and more.

The malicious DLLs stole credentials stored in the browser, but, more importantly, browser session cookies.
SilentFade then used the Facebook session cookie to gain access to the victim's Facebook account without needing to provide neither credentials nor a 2FA token, passing as a legitimate and already-authenticated account holder.
THE FACEBOOK PLATFORM BUG
Here is where SilentFade showed its true sophistication. [...]
Click to expand...

SilentFade: unveiling Chinese malware abusing Facebook ad platform

In this talk we will uncover a Chinese ecosystem that uses three distinct malware families to target Facebook users and commit ad fraud. One of these families, SilentFade, compromised Facebook accounts and caused ad-fraud related damages.
Click to expand...

Rasheed187 · Oct 3, 2020

mood said: ↑

How a Chinese malware gang defrauded Facebook users of $4 million
SilentFade group utilized a Windows trojan, browser injections, clever scripting, and a Facebook platform
October 1, 2020
https://www.zdnet.com/article/how-a-chinese-malware-gang-defrauded-facebook-users-of-4-million/
Click to expand...

Interesting stuff, but it makes you wonder what type of AV these people were using? Shouldn't AV's easily be able to block this type of malware?

Log in or Sign up

How a Chinese malware gang defrauded Facebook users of $4 million

guest Guest

Rasheed187 Registered Member

Log in or Sign up

How a Chinese malware gang defrauded Facebook users of $4 million

guest Guest

Rasheed187 Registered Member

Useful Searches