Sign In
Register
Help
Quote
Jan30-2012
Facebook Valentine's Theme Leads to Malware
9:39 am (UTC-7) | by Christopher Talampas (Fraud Analyst)
It's never too early to get ready for Valentine's day, it seems, even when it comes to malicious attacks. Recently, I came across a scam in Facebook that leverages the upcoming occasion.
The said attack begins with a post on affected users' wall inviting other users to install a Valentine's theme into their Facebook profile. Once users click on this post, they are redirected to another page that urges them to install the said theme. Note that this attack only works on either Google Chrome or Mozilla Firefox browsers. Clicking the Install button on the page will prompt the download of the malicious file, FacebookChrome.crx which Trend Micro detects as TROJ_FOOKBACE.A. When executed, TROJ_FOOKBACE.A executes a script that is capable of displaying ads from certain websites.
It also installs itself on the on the users' browsers as an extension named Facebook Improvement |Facebook.com.
Facebook Valentine's Theme Leads to Malware
9:39 am (UTC-7) | by Christopher Talampas (Fraud Analyst)
It's never too early to get ready for Valentine's day, it seems, even when it comes to malicious attacks. Recently, I came across a scam in Facebook that leverages the upcoming occasion.
The said attack begins with a post on affected users' wall inviting other users to install a Valentine's theme into their Facebook profile. Once users click on this post, they are redirected to another page that urges them to install the said theme. Note that this attack only works on either Google Chrome or Mozilla Firefox browsers. Clicking the Install button on the page will prompt the download of the malicious file, FacebookChrome.crx which Trend Micro detects as TROJ_FOOKBACE.A. When executed, TROJ_FOOKBACE.A executes a script that is capable of displaying ads from certain websites.
It also installs itself on the on the users' browsers as an extension named Facebook Improvement |Facebook.com.
Story & screenshots - http://blog.trendmicro.com/
MultiQuote