A new way to steal personal data and hijack Facebook accounts is executed through malicious advertising that actually releases the dangerous SYS01 malware.

Through Facebook ads disguised as desktop themes and games, the SYS01 malware is released that takes over accounts and steals user data, according to the cybersecurity website Trustwave.

They have referred to a new malvertising campaign on Facebook that “uses ads offering Windows desktop themes, games and pirated software as a hook. By clicking, users download the SYS01 malware, designed to steal information and hijack social network accounts.”

The malware was identified in November 2022 and is known to “primarily target Facebook business accounts.” “This malware extracts browser data such as login credentials, browsing history, and cookies.”

Cyber​​attackers rely on ads for Windows desktop themes and games that are attractive to users, reaching a larger audience.

The site Trustwave, in its SpiderLabs threat intelligence study, discovered that this SYS01 campaign has been active since September of last year and remains on Facebook displaying fake ads such as “Awesome_Themes_for_Win_10_11.zip” or “Adobe_Photoshop_2023.zip”, which They contain the SYS01 malware that is installed using DLL executables, PowerShell scripts, and PHP.

Once the malware is installed on the computer, it “creates tasks and steals cookies, history and credentials saved in the browser, including cryptocurrency wallets.”

Significant damage occurs with the theft of the identity of the people behind the real accounts added to the financial damages.

M.Pino

Source: nacion

(Reference image source: Unsplash+, in collaboration with Getty Images)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Malicious advertising on Facebook executes SYS01 malware apareció primero en Bitfinance.

A recent report on cybersecurity from the firm specialized in the area Blockchain SlowMist confirms the existence of a fake Skype application so dangerous that it can steal user data by monitoring the equipment, in addition to stealing cryptocurrencies, hijacking accounts and redirecting funds.

The malware, once installed on the computer, focuses on the files of interest to hackers, with the aggravation that it can take screenshots and photos. This facilitates the activity of cybercriminals.

Users who are victims of this fake Skype application can lose the funds in their wallets, once those behind the imposter app steal their data. The action can be extended to crypto exchange platforms, because the malware monitors computers.

The study has revealed that the largest number of those affected are in countries with regional blocks to access applications, such as China, particularly those for cryptocurrency trading.

The specialists who carried out the study warn of the phishing threat with this fake app. However, they clarify that downloading Skype from unofficial sites is the gateway for hackers. This action, due to naivety or overconfidence, makes it easier to access the equipment.

M.Pino

Source: diariobitcoin

(Reference image source: Unsplash+, in collaboration with Getty Images)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Fake Skype app steals cryptocurrency and user data apareció primero en Bitfinance.