Go Back   Web User Forums > Security > Security news and updates

Notices

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 02-05-16, 07:38
Dave_1 Dave_1 is offline
Highly valued member
 
Join Date: Aug 2014
Location: at home, laughing like a maniac
Posts: 1,991
Thumbs down BPlug Trojan Hides in Chrome Extensions...

BPlug trojan hides in chrome extensions and spams your facebook friends.
Trojan.BPlug.1074 is the name of a recently discovered trojan that hides in Chrome extensions and will spam your Facebook friends with links to malicious websites.


BPlug is part of a Google Chrome extension's JavaScript files. once users install the Chrome extension in their browser, it would wait for the victim to visit facebook. here, the trojan would retrieve the user's UID (user identifier) and their CSRF token. these details are then used to perform actions on Facebook on the user's behalf.

BPlug spams your friends via user groups and Facebook mentions

BPlug will hide some of the user's top-right menu options and prevents them from getting the logout menu, but also creates a randomly named group in the user's name.
Reply With Quote
  #2  
Old 02-05-16, 21:27
Madeline's Avatar
Madeline Madeline is offline
Top contributor
 
Join Date: Jan 2004
Location: Cymru
Posts: 52,104
Default Re: BPlug Trojan Hides in Chrome Extensions...

Nasty! It puts me in mind of this:

Fake Social Button Plugin Redirects to Angler EK

There's so much nasty stuff around these days, it can make being online, surfing and so on, more of a trial than a pleasure.
__________________
"I'm Irish. We think sideways." Spike Milligan. 1918 - 2002
Reply With Quote
Reply

Bookmarks

Tags
chrome, facebook, spam, trojan

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT. The time now is 17:51.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.
Copyright Dennis Publishing 2010, All rights reserved