The phishing campaign is spreading brand new malware targeting Facebook users

Ducktail, a famous phishing campaign that hijacks Facebook accounts that run ad campaigns for businesses, is now spreading brand new information-stealing malware.

According to researchers, according to Scaler Z (opens in a new tab)Ducktail previously used LinkedIn to distribute malware written in .NET Core that would steal Facebook business account data stored in Web browser and extract it to the private Telegram channel, which acted as a malware command and control (C2) server, communicating with target systems to coordinate cyber attacks.

Leave a Reply

Your email address will not be published. Required fields are marked *