Trustwave SpiderLabs previously released two blogs about Facebook and Instagram phishing. The common denominator between these two articles is the use of phony notifications which lure victims into thinking that they have allegedly committed a violation of terms. The victim must then make an appeal through a crafted phishing page to avoid losing access to […]
DUCKTAIL: Infostealer Malware targeting Facebook business accounts
WithSecure™ has discovered an ongoing operation (dubbed “DUCKTAIL”) that targets individuals and organizations that operate on Facebook’s Business and Ads platform. The threat actor targets individuals and employees that may have access to a Facebook Business account with an information-stealer malware. The malware is designed to steal browser cookies and take advantage of authenticated Facebook […]