Researchers with cybersecurity firm Trend Micro have uncovered a malicious extension in Google’s Chrome web browser that uses a multitude of methods to steal and mine cryptocurrency from infected users. The malware, which Trend Micro calls “FacexWorm”, makes its way onto a victim’s browser via social engineering tactics conducted through Facebook Messenger. A target would receive a link leading to a fake YouTube page that would prompt the user to install an extension in order to play the video. Once the extension is installed, it’s programmed to hijack users’ Facebook accounts and spread the link throughout their friends list. FacexWorm appears to be a Swiss Army knife of cryptocurrency-oriented malware. According to Trend Micro, the malicious extension has various capabilities: If an infected user tries logs into Google, MyMonero or Coinhive, FacexWorm will intercept the credentials. When a victim tries to go to a specified set of cryptocurrency trading platforms, […]
The post Chrome malware targets cryptocurrency, spreads through Facebook’s Messenger appeared first on Cyberscoop.
Continue reading Chrome malware targets cryptocurrency, spreads through Facebook’s Messenger→