Infostealer malware targets Facebook business accounts to capture sensitive data

Ducktail malware tries to hijack the accounts of individuals who use Facebook’s Business and Ads platforms, says WithSecure Intelligence.

Malware graphic on laptop screen.
Image: Adobe Stock

Social media is one area that cybercriminals love to exploit to attack their victims. And as one of the most popular social networks, Facebook is often in the crosshairs of malware campaigns. A new attack analyzed by cybersecurity provider WithSecure Intelligence targets Facebook business users with the intent of stealing their sensitive data and taking over their accounts.

How does Ducktail attack businesses?

Using Facebook’s Meta Business Suite, organizations can designate specific employees to communicate with customers, discuss their products and services and create ads to run on Facebook. In the malicious campaign dubbed Ducktail, cybercriminals look for companies that use Facebook’s Business/Ads platform and then target people within the company who may have high-level access to the business accounts. Among the employees singled out in this campaign have been ones in management, digital marketing, digital media and human resources, according to WithSecure.

SEE: Mobile device security policy (TechRepublic Premium)

As the next step, the attackers deploy malware to the potential victims, sometimes delivered through LinkedIn and often hosted on cloud-based services such as Dropbox and iCloud. The malware itself is packaged as an archive file that contains documents, images and videos. With such names as “Project Development Plan” and “Project Information,” the files are designed to coax people into opening them and launching the malware.

Once installed, the malware scans for any of the following browsers: Google Chrome, Microsoft Edge, Brave and Firefox. For each browser, Ducktail extracts all stored cookies, including any for a Facebook session. Using that cookie, the malware then connects with different Facebook endpoints to grab information from the user’s Facebook account.

For personal Facebook accounts, the malware aims to grab the user’s name, email address, birthdate and user ID. For business accounts, it seeks out the name, verification status, ad account limit, owner, role and names of clients. And for associated Facebook ad accounts, it looks for the name, ID, account status, payment cycle, currency and amount spent.

Ultimately, the cybercriminals give themselves admin and finance editor roles on the victim’s Facebook business account. With that goal achieved, they can then fully control the account as well access and modify credit card information, transactions, invoices and payment methods.

SEE: Password breach: Why pop culture and passwords don’t mix (free PDF) (TechRepublic)

“As businesses become more aware and resilient to traditional ransomware attacks, cybercriminals will look for new ways to convert successful cyberattacks into ill-gotten financial gains,” said Chris Clements, VP of solutions architecture at cybersecurity company Cerberus Sentinel. “Historically we’ve seen similar attacks on social media accounts such as the Twitter hack in July 2020…but the directed approach of targeting Facebook business accounts is a new and interesting angle. Contrasting with prior social media hijacking that makes itself obvious very quickly by posting links to scams or malware, this campaign is stealthier, looking to modify ad spends or introduce ad fraud.”

Securing businesses from this new malware

To protect organizations against these types of social media-driven threats, WithSecure offers the following recommendations:

  • Turn to Endpoint Detection and Response tools: EDR tools can analyze every stage of an attack, thereby generating information on a single incident to help you detect and mitigate it.
  • Protect endpoints: A good endpoint protection and security tool can detect malware across your internal and external networks and devices. Make sure that real-time protection is enabled but also run full manual scans on endpoints.
  • Review Facebook business users: Sign into your Facebook Business administrator page to review all the users who have been added. Select Business Manager, go to Settings and then select People. You can then revoke access for any unknown users who were given admin access.

“Nearly every organization could best improve their cybersecurity defense plans if they focused far more on reducing the likelihood of social engineering compromise,” said Roger Grimes, data-driven defense evangelist at cybersecurity firm KnowBe4. “Every organization should look to see what they can improve in their defense-in-depth plan (e.g., policies, technical defenses, and education) to defeat social engineering. It is because almost no organization appropriately focuses the necessary resources and training against social engineering that hackers and malware [are able] to be so long term successful.”

Source link

istanbul escort aksaray escort arnavutköy escort ataköy escort avcılar escort avcılar türbanlı escort avrupa yakası escort bağcılar escort bahçelievler escort bahçeşehir escort bakırköy escort başakşehir escort bayrampaşa escort beşiktaş escort beykent escort beylikdüzü escort beylikdüzü türbanlı escort beyoğlu escort büyükçekmece escort cevizlibağ escort çapa escort çatalca escort esenler escort esenyurt escort esenyurt türbanlı escort etiler escort eyüp escort fatih escort fındıkzade escort florya escort gaziosmanpaşa escort güneşli escort güngören escort halkalı escort ikitelli escort istanbul escort kağıthane escort kayaşehir escort küçükçekmece escort mecidiyeköy escort merter escort nişantaşı escort sarıyer escort sefaköy escort silivri escort sultangazi escort suriyeli escort şirinevler escort şişli escort taksim escort topkapı escort yenibosna escort zeytinburnu escort porno 1080p porno izle 4k porno izle 720p porno izle abella danger alman alman porno alman porno izle aloha tube porno amatör amatör porno amatör porno izle anal anal porno anal porno izle arap porno asa akira porno asyalı porno bangbros porno bangbros porno izle banyoda sikis başörtülü porno beeg porno izle beyaz tenli porno izle biseksuel porno izle bisexsuel porno brandi love porno brazzers brazzers porno izle canli porno canli porno izle çinli porno çinli porno izle ensest porno ensest porno izle ensest seks erotik porno erotik porno izle esmer porno esmer porno izle etek altı fake agent fake taxi fake taxi porno fantazi pornoları fantezi porno izle fetiş porno fetiş porno izle fetish fransız porno fransız porno izle full hd hg porno izle gangbang porno genç kız porno izle genç kız sikişi genç teen porno izle gizli çekim porno gizli çekim pornosu grup pornosu grup porno grup porno izle hd pornolar hd porno hd porno izle hemşire porno hemşire pornosu hizmetçi porno hizmetçi porno izle ingiliz porno japon pornoları japon porno kızlık bozma kızlık bozma porno izle konulu porno konulu porno izle koreli porno köylü pornoları kumral porno kumral porno izle latin pornoları latin porno latin porno izle lezbiyen pornoları lezbiyen porno lezbiyen porno izle lisa ann porno liseli pornoları liseli porno liseli porno izle manken porno manken porno izle masaj porno izle masturbasyon porno izle masturbasyon pornoları mature porno mia khalifa porno mia malkova porno milf porno izle mobil porno mobil porno izle öğrenci porno izle öğretmen porno izle okul porno izle olgun kadın pornosu olgun porno oral porno oral porno izle oral seks porna izle pornhub pornhub porno izle porno film izle porno indir porno izle porno resimler porno star porntube porno izle redtube redtube pornoları riley reid porno rokettube rus pornoları rus porno rus porno izle sakso blowjob porno izle sarışın pornoları sarışın porno sarışın porno izle sarışın pornoları sekreter porno shemale sikiş sikiş sikiş izle şişman porno siyahi pornoları suriyeli pornoları swinger porno tecavüz porno teen porn türbanlı pornoları türbanlı porno türk pornoları türk porno türk porno izle türkçe altyazılı porno türkçe altyazılı porno izle xhamster pornoları xhamster porno xhamster porno izle xnxx xnxx porno xnxx porno izle xvideos xvideos porno izle yaşlı porno yeşilçam porno izle youjizz youporn youporn porno izle zenci porno güvenilir bahis siteleri bahis siteleri casino deneme bonusu casino siteleri deneme bonusu para yatırma bonusu bahis siteleri casino siteleribahis sitesi para yatırma