Malware spreads through crack software specializing in stealing Facebook, Instagram, and Twitter accounts
Security researchers have discovered an information-stealing malware called FFDroider. By stealing credentials and cookies stored in the browser, FFDroider can take control of the victim's social media accounts.
Social media accounts, especially verified (green tick) accounts, are attractive targets for hackers because they can use hacked accounts for other fraudulent purposes.
These accounts are even more attractive if they have access to the advertising platforms of the social networks. From there, the hacker can use the victim's account and money to run malicious ads.
According to researchers at Zscaler, FFDroider spreads through crackers, fake freeware, cracked games, and other files downloaded from torrent sites.
Once installed, the FFDroider malware will also be installed, but disguised as the Telegram desktop application to avoid detection.
Once launched, the malware creates a Windows registry key named FFDroider. Next, it starts collecting cookie data and account credentials stored in Google Chrome, Mozilla Firefox, Internet Explorer, and Microsoft Edge.
FFDroider is designed to target social logins and e-commerce sites. The hacker behind this malicious code paid special attention to Facebook, Instagram, Amazon, eBay, Etsy, Twitter accounts and the WAX Cloud wallet access gateway.
After stealing the information and sending it to the command and control server (C2), FFDroider will download new modules. It is not yet known what the new modules will do, but Zscaler predicts they will pose a greater threat.
You should read it
- Why should you think carefully before logging in with a social network account?
- BankBot is back on Play Store - an uninterrupted story about malware on Android
- Modular Malware - New stealth attack method to steal data
- 5 tips to keep your social network account in a 'safe' state
- Detect new Android malware fake system update to track and steal user information
- What is Safe Malware? Why is it so dangerous?
- Instructions for registering an Instagram account on your phone
- Lotus - the 'made in Vietnam' social network has opened an account registration and trial
- What is malware analysis? How are the steps taken?
- Instructions for creating Hahalolo account
- Sneaking malware on the Internet
- Google officially joined the Instagram image social network
Maybe you are interested
What is PetitPotam Attack? How to overcome PetitPotam attack The Microsoft MSERT tool can find web shells related to the Exchange Server attack campaign Many encrypted SSDs can be decoded without a password Wsreset tool of Windows 10 Store was used by hackers to bypass anti-virus software The CredSSP vulnerability in the RDP protocol affects all versions of Windows Detects two serious vulnerabilities on uTorrent that can help hackers execute malicious code or view download history on your computer