Influenza A virus subtype H5N1 novel malware crusade has been discovered on social media which spreads through via Facebook is stealing users social media credentials together with downloading crypto mining code on victims’ systems.
The malware is known equally Nigelthorn, together with was discovered past times the Radware researchers inward May only, but was active March 2018. together with it has already infected to a greater extent than than 100,000 users globally.
The novel crusade focuses on the social media websites, but its principal victim is Facebook's users. The malware abuses a legitimate Google Chrome extension called "Nigelify," to bypass validation banking enterprise gibe past times Google.
According to the researchers, "the malware redirects victims to a faux YouTube page together with asks the user to install a Chrome extension to play the video. Once the user clicks on “Add Extension,” the malicious extension is installed, together with the car is at in 1 trial purpose of the botnet."
“This is done to play tricks users together with call upwards access to their Facebook account. Over 75 percent of the infections comprehend the Philippines, Venezuela, together with Ecuador. The remaining 25 percent are distributed over 97 other countries,” said researchers.
Influenza A virus subtype H5N1 Google spokesperson told Threatpost that "we removed the malicious extensions from Chrome Web Store together with the browsers of the modest pct of affected users inside hours of beingness alerted."
