Warning: New variants of malicious code digging on Facebook threaten users in Vietnam

Bkav has issued a warning about the emergence of a new variant of the virtual money code spread via Facebook, W32.FbCoinMiner that is threatening users in Vietnam. This new variant has the ability to post on groups of people with a large number of participants, so it has a very fast spread rate exponentially. There are currently 45,000 affected computers.

W32.FbCoinMiner malicious code not only takes control of the victim computer but also can update other new malicious codes to steal passwords, accounts .

The W32.FbCoinMiner malicious file appears on Facebook groups with a large number of members in the form of a video file with a 'wow video' title and format 'video_xxxxx.bz' where xxxxx is 5 digits random.

If the user downloads this malicious file and opens it up, W32.FbCoinMiner will immediately take control, taking advantage of the victim's computer to illegally dig virtual money while controlling the user's browser to retrieve the password type, bank account .

At the end of 2017, Facebook code digs virtual money in the shadow of a fake video that has appeared and spread through Facebook Messenge causing Internet turmoil in Vietnam. Then hackers programmed this virus to be able to automatically generate new variants as well as install a post feature on the group to help them bypass the broader antivirus software and spread.

To avoid being infected with malicious code, users should be alert when receiving files sent via Facebook Messenger, file sharing on Group.