WARNING: Malware Attack Targets Facebook Users With Google Chrome, And Possibly Firefox

WarningSign2Another case of malware via video is rapidly spreading via Facebook to Google Chromeusers, at the rate of about 40,000 per hour, Italian security researcher Carlo De Micheli toldThe New York Times’ Bits blog.

De Micheli told Bits the bait for this malware attack is familiar: Facebook users receive emails or messages saying that they were tagged in Facebook posts, and if they click on the enclosed links, they are directed to websites outside of Facebook and prompted to download browser extensions in order to watch the promised videos.

According to De Micheli, via Bits, if users take the bait, the malware plugin can access all information stored in their browsers, including accounts with saved passwords, and it hijacks users’ Facebook accounts and spreads via the social network.

De Micheli told Bits the attackers also apparently adapted the code to target users of another browser, Firefox.

Facebook Communications Manager Michael Kirkland told Bits the social network’s security team detected the attack and was in the process of wiping out the malicious links, adding:

In the meantime, we have been blocking people from clicking through the links and have reported the bad browser extensions to the appropriate parties. We believe only a small percentage of our users were affected by this issue, and we are currently working with them to ensure that they’ve removed the bad browser extension.

And Google Spokeswoman Veronica Navarrete told Bits:

When we detect items containing malware or learn of them through reports, we remove them from the Chrome Web Store and from active Chrome instances. We’ve already removed several of these extensions, and are continuing to improve our automated systems to help detect them even faster.

Justin O’Kelly, a spokesman for Firefox parent Mozilla, shared the following obvious but often-ignored advice with Bits:

Users should be wary of scams or suspicious messages asking them to install software from an unknown site.

Readers: Were you or any of your friends victimized by this malware attack or similar ones?

Source: http://allfacebook.com/malware-google-chrome-firefox_b124155


About Gregory D Evans

Gregory Evans is one of the worlds greatest security consultants. Go to http://GregoryDEvans.com for more details.
This entry was posted in Uncategorized. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s