- Jul 22, 2014
- 2,525
Spam campaign active only in France, according to reports
A Facebook spam campaign has reached epic proportions in France, enough for the local government to issue a formal warning last week, after the number of infections has gone through the roof.
The campaign consists of users receiving a message from one of their friends, asking them if they are the person in a video.
The link perpetrates to be a YouTube video uploaded online. The message is very well engineered to use both the receiver's name and photo for the spam link's preview.
Users that follow the link are tricked to install a Chrome browser extension to view the video. The extension hides the Eko malware.
According to reports in French local media, including the Le Monde newspaper, this extension, which uses different names, injects ads in the pages users visit, but can also collect data such as passwords and browser history.
Facebook is currently scanning and blocking these messages. On Tuesday, October 4, France's Interior Ministry has warned users via its Facebook page not click on these links.
Users that have clicked on the links are encouraged to search their browser's settings and remove the rogue extension. Authorities say that users of other browsers might have been served add-ons for their browsers as well. There is no evidence that the spam campaign affected users outside of France.
Read more on the link above
A Facebook spam campaign has reached epic proportions in France, enough for the local government to issue a formal warning last week, after the number of infections has gone through the roof.
The campaign consists of users receiving a message from one of their friends, asking them if they are the person in a video.
The link perpetrates to be a YouTube video uploaded online. The message is very well engineered to use both the receiver's name and photo for the spam link's preview.
Users that follow the link are tricked to install a Chrome browser extension to view the video. The extension hides the Eko malware.
According to reports in French local media, including the Le Monde newspaper, this extension, which uses different names, injects ads in the pages users visit, but can also collect data such as passwords and browser history.
Facebook is currently scanning and blocking these messages. On Tuesday, October 4, France's Interior Ministry has warned users via its Facebook page not click on these links.
Users that have clicked on the links are encouraged to search their browser's settings and remove the rogue extension. Authorities say that users of other browsers might have been served add-ons for their browsers as well. There is no evidence that the spam campaign affected users outside of France.
Read more on the link above
Last edited by a moderator:
