Fake Facebook ads for Windows desktop themes are actually sending out malware
here's what to know

Date:
Tue, 16 Jul 2024 16:17:02 +0000

Description:
Security researchers uncover new malvertising campaign hiding infostealers behind Windows themes.

FULL STORY ======================================================================

A new Facebook malvertising campaign has been discovered tricking victims looking for Windows themes and other software into downloading information-stealing malware .

As per the report from cybersecurity researchers Trustwave, threat actors
have been abusing Facebooks ad network to create malicious advertisements for things like Windows themes, top games, AI software, and more. The campaign, which also leverages LinkedIn and YouTube, has been active since at least September 2023, and is still active, at press time.

The victims dont seem to belong to any specific cohort. Instead, the threat actors are seemingly casting a wide net and trying to infect as many people
as possible. The infostealer used in this campaign is called SYS01 stealer, and it was first spotted by cybersecurity pros Morphisec in mid-2022.
Stealing Facebook Business accounts

As far as infostealers go, SYS01 stealer isnt that much different. It grabs sensitive information such as login data, cookies, and similar information, from the target endpoints. It also hunts for Facebook ad and business account information, which it then uses to create additional malicious ads and
further propagate the malware.

However, since its first detection in 2022, the infostealer has evolved to better evade detection and improve targeting. That being said, the latest variant can detect if its being reverse-engineered in virtual environments. The construction of C2 domains, ad tagging, and hosting on Telegram are all novel and modified tactics, the researchers added, highlighting the malwares evolution.

Facebook, LinkedIn, and YouTube are gigantic social networks, used by
billions of people every day. As such, they will always be a target of cybercriminals looking to deploy malware and ultimately generate profit. Trustwave believes malvertising threats are so pervasive that they may never go away, suggesting that consumers should be extra wary when looking for software, especially commercial products. More from TechRadar Pro This well-known infostealer is back with upgraded malware Here's a list of the
best firewalls today These are the best endpoint protection tools right now



======================================================================
Link to news story: https://www.techradar.com/pro/security/fake-facebook-ads-for-windows-desktop-t hemes-are-actually-sending-out-malware-heres-what-to-know


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)