Trojan Group Infects 110K Facebook Users yesterday

<div style="background-color: white; color: #333333; font-family: Georgia, Times, 'Times New Roman', serif; font-size: 15px; line-height: 1.48em; margin-bottom: 1em; margin-top: 1em;"> Cybercriminals reportedly used Trojan malware to infect at least 110,000<a href="http://www.facebook.com/" style="color: #003e7d; text-decoration: none;" target="_blank">Facebook</a> (FB) users in just two days last week.</div> <div class="separator" style="clear: both; text-align: center;"> </div> <div style="background-color: white; color: #333333; font-family: Georgia, Times, 'Times New Roman', serif; font-size: 15px; line-height: 1.48em; margin-bottom: 1em; margin-top: 1em;"> <div class="separator" style="clear: both; text-align: center;"> <a href="http://3.bp.blogspot.com/-Nhfta0XzFLM/VNWgveSNcGI/AAAAAAAAAIw/LEb2T6ZvCBg/s1600/Porn-Based%2BMalware%2BIs%2BSweeping%2BAcross%2BFacebook.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="155" src="http://3.bp.blogspot.com/-Nhfta0XzFLM/VNWgveSNcGI/AAAAAAAAAIw/LEb2T6ZvCBg/s1600/Porn-Based%2BMalware%2BIs%2BSweeping%2BAcross%2BFacebook.jpg" width="320" /></a></div> <br /></div> <div style="background-color: white; color: #333333; font-family: Georgia, Times, 'Times New Roman', serif; font-size: 15px; line-height: 1.48em; margin-bottom: 1em; margin-top: 1em;"> And as a result, the social network tops this week's list of IT security newsmakers, followed by <a href="http://www.akamai.com/" style="color: #003e7d; text-decoration: none;" target="_blank">Akamai Technologies</a> (AKAM),<a href="http://www.umassmemorialhealthcare.org/physicians/umass-memorial-medical-group" style="color: #003e7d; text-decoration: none;" target="_blank">UMass Memorial Medical Group</a> and <a href="http://usa.kaspersky.com/" style="color: #003e7d; text-decoration: none;" target="_blank">Kaspersky Lab</a>.</div> <div class="first-text" data-textannotation-id="bbd3508c3471f79f4bef4a142134f36a" style="background-color: white; box-sizing: border-box; color: #222222; font-family: Georgia, serif; font-size: 0.9375rem; line-height: 24px; margin-bottom: 1.25rem; padding: 0px; text-rendering: auto; word-break: break-word;"> Don't click any porn links on Facebook. Just don't. It's a good rule of thumb, but there's an extra good reason right now. There's a troubling type of porn-based malware that's <a href="http://threatpost.com/facebook-malware-poses-as-flash-update-infects-110k-users/110775" sl-processed="1" style="box-sizing: border-box; color: #28ade6; line-height: inherit; text-decoration: none;" target="_blank">apparently infected over 110,000 Facebook users</a> in two days. And you could get the same Click Transmitted Disease.</div> <div data-textannotation-id="625cfdc0f6997a0e07d861b8bd19f58d" style="background-color: white; box-sizing: border-box; color: #222222; font-family: Georgia, serif; font-size: 0.9375rem; line-height: 24px; margin-bottom: 1.25rem; padding: 0px; text-rendering: auto; word-break: break-word;"> The Facebook malware <a href="http://seclists.org/fulldisclosure/2015/Jan/131" sl-processed="1" style="box-sizing: border-box; color: #28ade6; line-height: inherit; text-decoration: none;" target="_blank">is disguised as a Flash update</a>. Basically, you'll see a link to a porn video in one of your friend's posts. If you click on it (don't) you'll be taken to a website that <a href="http://www.cso.com.au/article/564791/real-flash-patches-go-fake-ones-hit-thousands-facebook-users/" sl-processed="1" style="box-sizing: border-box; color: #28ade6; line-height: inherit; text-decoration: none;" target="_blank">may or may not be disguised as YouTube </a>and see the first few seconds of the video. Then the video will prompt you to download a Flash update to keep watching. If you do, you'll infect your computer with a Trojan that can highjack your keyboard and mouse.</div> <div data-textannotation-id="46e3e8875fa1d5e5e09f23c3d3a69b96" style="background-color: white; box-sizing: border-box; color: #222222; font-family: Georgia, serif; font-size: 0.9375rem; line-height: 24px; margin-bottom: 1.25rem; padding: 0px; text-rendering: auto; word-break: break-word;"> Once you're infected, the malware starts posting porn links to your Facebook wall and tagging up to 20 friends each time. Unlike blasting messages, this technique enables the malware to keep a low profile (as low as you can while posting literal porn), while also displaying itself publicly on your profile. That's evidently how the malware infected so many Facebook users so quickly.</div> <div data-textannotation-id="2a8241a682ae39017d0461e6e812202e" style="background-color: white; box-sizing: border-box; color: #222222; font-family: Georgia, serif; font-size: 0.9375rem; line-height: 24px; margin-bottom: 1.25rem; padding: 0px; text-rendering: auto; word-break: break-word;"> We haven't seen this malware in action, and we don't want to. We've also reached out to Facebook to see how they're handling the issue. Regardless, you can save yourself the hassle of dealing with it if you just avoid clicking porn links on Facebook. Don't do it! In general! </div>

Trojan Group Infects 110K Facebook Users yesterday

Cybercriminals reportedly used Trojan malware to infect at least 110,000 Facebook  (FB) users in just two days last week. And as a ...

Read more »