Two new attacks have been revealed by cybersecurity experts that use malicious advertisements and phony websites to serve phony browser extensions and steal private information.
According to Bitdefender, the purpose of the malvertising effort is to promote phony “Meta Verified” browser extensions called SocialMetrics Pro that make the promise that they can unlock the blue check badge for Instagram and Facebook profiles. The aforementioned extension has been found to serve at least 37 malicious advertisements.
According to the Romanian cybersecurity provider, the malicious advertisements come with a video instruction that walks viewers through the process of downloading and installing a browser extension that promises to unlock Facebook’s blue verification tick or other unique features.
In actuality, however, the extension—which is housed on a trustworthy cloud service called Box—can gather Facebook session cookies read more about Fake Madgicx Plus and SocialMetrics Extensions Are Hijacking Meta Business Accounts.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.