Brief information for Facebook users. There are indications that a campaign is running via ads on Facebook, which pretends to be a fake Trojan in the browser and asks the user to call a "Microsoft support page". This is of course also fake and amounts to fraud. I came across such an ad the other day, and I'll post it briefly on the blog.
The browser reports a Trojan
I could hardly believe it – on August 29, 2024, I checked some posts from IT groups and PMs from blog readers on Facebook, but deliberately didn't click on anything. I just had a number of tabs (from Facebook and other websites) open in my browser. Suddenly, a window opened suggesting that I had a Trojan on my system.
Termination only task manager
At this point, I was initially perplexed because I couldn't see a close button ad-hoc – the tabs were hidden. It was clear that I wouldn't click on anything in the popup or button area. I then tried something else by clicking on the favorites bar, but was immediately in full screen mode – the ESC key to close this mode no longer responded as far as I remember. I then used Ctrl+Alt+Del to open the context menu of the Windows shell and selected the command to switch to the task manager.
This ended the full screen mode and the desktop appeared with the task manager window. I then tried again to switch to the browser window, but was again unable to find a tab to close this fake display. I then quickly took a screenshot for documentation purposes and then clicked on the process for the display in the task manager and had it terminated. This killed the entire Chromium clone.
