Zero Day

Ryan Naraine, Emil Protalinski and Dancho Danchev

Cybercriminals hijack Facebook accounts through bogus browser extensions

By Dancho Danchev | December 22, 2011, 12:09pm PST

Summary: Researchers from WebSense are warning on a newly circulating fraudulent scheme relying on bogus browser extensions for hijacking Facebook accounts.

Researchers from WebSense are warning on a newly circulating fraudulent scheme relying on bogus browser extensions for hijacking Facebook accounts.

The add-ons, advertised as DivX plug-ins or coupon generator, use the Facebook API (Application Programming Interface) to post unauthorized messages on behalf of Facebook users who log in from the affected browsers.

According to the researchers, at the moment, only Chrome and Firefox plugins are used.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

More from “Zero Day”

Localized ransomware variants impersonate law enforcement agencies

Amnesty International UK compromised, serving exploits and malware

Topics

Facebook, Web Browser, Cybercriminal, Browser Extension, Web Browsers, Internet, Dancho Danchev

Dancho Danchev is an independent security consultant and cyber threats analyst, with extensive experience in open source intelligence gathering, malware and cybercrime incident response.

Full Bio
Disclosure
Contact

Vendor HotSpot

The 360° Conversation around Cloud Computing

TECH VISUALIZER brings the social conversation to life... powered by Brocade

Learn More »

Related Discussions on TechRepublic

Did you know you can take part in these discussions with your ZDNet membership?

Ask a Question Start a Discussion

Comments

Add Your Opinion

Join the conversation!

Follow via:: RSS; Email Alert

Just In

Facebook is a privacy and security nightmare...

Dwight Kunder Updated - 24th Dec

I discontinued this Facebook thing a couple of months ago....
These guys have built an empire for themselves selling our personal information for money.....and of course for target advertising
To make the matters worse, their entire structure is un secure and vulnerable to hacks, hijacks and are spending little resource and efforts to keep the users safe.

They are killing the golden goose which has made them so rich overnight out of thin air!

View in thread