Tag: Facebook Messenger

North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign
News

North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign

The Kimsuky hacker gang, associated with North Korea, has been tied to a novel social engineering attack that uses Messenger to trick targets into believing they are from Facebook and then downloads malware. The threat actor built a Facebook account with a phony identity disguised as a public official working in the North Korean human rights field, South Korean cybersecurity company Genians stated in a study published last week. It said that the multi-phase attack effort, which poses as a genuine person, is intended to attack activists in the anti-North Korea and human rights movements in North Korea. This approach differs from traditional spear-phishing tactics focused on emails in that it uses Facebook Messenger read more North Korean Hackers Exploit Facebook Messenger in Targe...
Vietnamese Hackers Deploy Python-Based Stealer via Facebook Messenger
News

Vietnamese Hackers Deploy Python-Based Stealer via Facebook Messenger

A "swarm of fake and hijacked personal accounts" are being used in a new phishing operation that uses Facebook Messenger to spread messages with malicious attachments with the ultimate goal of gaining control of the targets' accounts. This campaign, which once more has its roots in a Vietnamese-based organization, "uses a tiny compressed file attachment that packs a powerful Python-based stealer dropped in a multi-stage process full of simple yet effective obfuscation methods," according to research by Guardio Labs researcher Oleg Zaytsev. These attacks, known as MrTonyScam, lure potential victims with messages that tempt them to click on the RAR and ZIP archive files, which then triggers the deployment of a dropper that downloads the subsequent stage from a GitHub or GitLab reposit...