New malware is targeting Facebook users via phishing emails

Malware interference has become increasingly irritating, as several cases are emerging these days. The very recent one has to be phishing emails that specifically target Facebookers. Ducktail is a familiar campaign that swindles crucial browser data from numerous business accounts.

According to a new study, this campaign has been infiltrating private accounts for a long time. Zscaler said that cyber attackers dispersed viruses via malware written in NET Core to Facebook Business account data kept in a browser through the LinkedIn account. Moreover, these attackers have expertise in malware’s command and control system C2 to connect with targeted accounts to manage the cyberattack.


Furthermore, these attacks are not only infiltrating Facebook accounts and stealing confidential material, but they have also started getting access to crypto wallets, account information, and system data. The Ducktail campaign has put business accounts in jeopardy, and the tech needs to take steps to eliminate the malicious software interferences.

In addition, a modification to the C2 has been made to direct the data from a Telegram channel to a JSON website that stores crucial account and crypto token information and protects it from scams. Cyber attackers are savvy to target their desired accounts and send them emails in the shape of archive files.

Zscaler added that the advanced version is being used by the attackers to get into the system and con people. Users are advised to use different accounts and anonymous browsers or not save important material in their browsers to avoid such mishaps. Because Ducktail has caused such a stir, they upload their malware files to memory to prevent them from being interrupted by malware protection systems.

To save your data, the best method is to establish an anonymous account. Because once the malware enters the data, it grants third-party access to all of it, including your bank accounts. Cybercriminals will gain from compromising Facebook's endpoint, so it should not be compromised. The breach will allow access to the authentication status and the amount spent on particular purchases.

In addition, people need to be aware that malware files can also be accessed through archive files and email. However, they have occasionally been duped into downloading files that do not reveal any signs of a virus. For example, there are files for movie subtitles that contain viruses that can harm your computer. Similarly, viruses can be downloaded onto your devices from adult and illegitimate content. As a result, check to see that the link you're using comes from a legitimate website.

While this new info stealer is on the rise, one needs to be more careful and cautious when downloading phishing emails and links. There is multiple software that provides their customers with protection against malware infiltration, which could provide some protection to the users.

Read next: Companies Are Avoiding Open Source Software Citing Security Concerns
Previous Post Next Post