Rogue pornography links on the world’s about pop social network bring reportedly infected over 110,000 Facebook users amongst a malware Trojan inwards only 2 days together with it is however on the rise, a safety researcher warned Friday.
The Facebook malware disguised equally a Flash Player update together with spreads itself yesteryear posting links to a pornographic video from the Facebook accounts of previously infected users. The malware to a greater extent than ofttimes than non tags equally many equally 20 friends of the infected user.
"In the novel technique, which nosotros telephone telephone it 'Magnet,' the malware gets to a greater extent than visibility to potential victims yesteryear tagging the friends of the victim inwards the malicious post," said Mohammad Faghani, a senior consultant at PricewaterhouseCoopers, inwards a mailing listing post to the Full Disclosure infosec hangout.
"A tag may hold upwards seen yesteryear friends of the victim's friends equally well, which leads to a larger expose of potential victims. This volition speed upwards the malware propagation."
The malicious post volition furnish y'all a link to a porn video inwards i of your friend's posts. Once clicked, the malicious link volition the world y'all a website that volition prompt y'all to chop-chop download together with run a Flash update in guild to play the video message purporting to hold upwards pornography.
Unfortunately, doing together with thus volition download a Trojan horse straight onto your calculator system, allowing a malicious hacker to hijack your Keyboard together with Mouse. By having command of victim’s keyboard together with mouse, i tin flame capture really useful information – similar webmail together with banking enterprise concern human relationship passwords.
Once installed on a Windows PC, the malware collects the victim's information together with tries to communicate amongst the server behind the filmver.com and pornokan.com domains for to a greater extent than instructions.
Faghani notes that the malicious file drops the chromium.exe, wget.exe, arsiv.exe together with verclsid.exe executable files. In general, Chromium.exe is a generic dropper that in all probability downloads to a greater extent than malware to install, such equally the keylogger, in i lawsuit it's running.
This novel technique likewise enables the malware to hold a depression profile, spell likewise displaying itself publicly on your profile, together with this is alone the argue how the malware infected together with thus many Facebook users only inwards 2 days.
The other embarrassing role of this is when your household unit of measurement together with friends run across that y'all bring only liked together with shared porn links on your wall.
In a statement, Facebook said, "We utilisation a expose of automated systems to set potentially harmful links together with halt them from spreading. In this case, we're aware of these malware varieties, which are typically hosted equally browser extensions together with distributed using links on social media sites."
In guild to halt the moving ridge of infections, Facebook is "blocking links to these scams, offering cleanup options, together with pursuing additional measures to ensure that people teach out on to bring a condom sense on Facebook."
To protect yourself from such type of malware infections, only avoid clicking rogue porn links on the social media sites, together with when it’s Facebook, Don't create it ! Just Don’t !
