Trend Micro detects malware attacking Social Media Accounts

As per the latest update that malicious files have been targeting social media sites to get the users install a fake video player update, Trend Micro has announced spotting a cyber-threat named “TROJ_FEBUSER.A”. This malware is lurking around social media sites targeting users of either Google Chrome or Mozilla Firefox. This threat uses fake extensions for browsers to infiltrate user systems and hijack social media accounts, specifically Facebook, Google+ and Twitter accounts.

An updated version of the plugin detected as JS_FEBUSER.AB has also been identified as F-Secure Security Pack 6.1.0 (for Google Chrome) and F-Secure Security Pack 6.1 (for Mozilla Firefox).

Once installed, it connects to a malicious URL to download a configuration file. It uses the details on that configuration file to hijack the user’s social media accounts without any authorization from the user.

This threat tries to perform the above actions on three different social networks: Facebook, Google+ and Twitter. Because of this threat, the attackers are able to hijack the accounts of the users and could, for example, use them to spread links to other malicious sites.

Cybercriminals are getting smarter at making their lures much more convincing, even resorting to abusing legitimate services and users in order to appear legitimate.