Researchers studying cybersecurity are drawing attention to a campaign that uses phony cryptocurrency trading apps to spread JSCEAL, a built V8 JavaScript (JSC) virus that can steal wallets and passwords.
According to Check Point, the activity uses thousands of malicious Facebook ads to try to fool unwary users into visiting fake websites that tell them to install the fake apps. These advertisements are sent through either newly established or stolen accounts.
According to an examination by the company, the actors divide the functionality of the installer into various parts and, most significantly, transfer some functionality to the JavaScript files within the compromised websites. At each level of the operation, the attackers can modify their techniques and payloads thanks to a modular, multi-layered infection flow.
It’s important to note that Microsoft and WithSecure both previously documented some portions read more about Hackers Use Facebook Ads to Spread JSCEAL Malware via Fake Cryptocurrency Trading Apps.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.