Cybercriminals are utilizing compromised Facebook accounts to target businesses through Facebook Messenger with seemingly harmless links to RAR/ZIP files, according to a new report released by Guardio Labs, experts in online safety applications. Once clicked, these links secretly download malicious software, granting attackers access to sensitive browser data, including passwords and cookies.
Guardio Labs discovered that Facebook's Messenger platform has become a playground for malicious actors. These actors, often using fake or stolen personal accounts, send messages with dangerous attachments. Their primary targets are business accounts, and their success rate is a concerning 1 in 70 businesses infected.
Small business owners, in particular, are at risk. Messages sent to them appear as complaints about policy violations or questions related to products. Each message is crafted to appear unique, making them difficult to spot as threats. They look like regular customers! Falling victim to this campaign can lead to data theft, financial loss, and eroded trust in genuine customer inquiries via Facebook Messenger.
Worryingly, compromised business accounts can be sold on the dark web, retaining their ratings, followers, and customers. This presents opportunities for impersonation and fraudulent activities under the guise of the compromised entity.
This campaign, linked to a group based in Vietnam, relies on compressed files (RAR/ZIP) concealing Python-based malware. The attack operates in stages, cleverly evading normal detection. When a business clicks on the deceptive link, malware is covertly downloaded. It then harvests browser data, allowing attackers unauthorized access to online accounts.
This Facebook Messenger campaign underscores the evolving tactics of cybercriminals. New England's small business owners must exercise caution, scrutinize unsolicited messages, and avoid suspicious links. Enhanced security measures on platforms like Facebook are crucial. In an increasingly digital landscape, vigilance and education are vital defenses.