#Ms office 2016 activation key facebook update

“If you are in a role that has admin access to corporate social media accounts, it is important to exercise caution when interacting with others on social media platforms, especially when dealing with attachments or links sent from individuals you are unfamiliar with.” “Many spear phishing campaigns target users on LinkedIn,” comments the WithSecure report ( PDF) author, Mohammad Kazem Hassan Nejad.

Individuals within those targets – people with managerial, digital marketing, digital media, and human resources roles – have been located, possibly through LinkedIn, and the malware has been delivered via LinkedIn. Target organizations are found by locating companies operating on Facebook’s Business/Ads platform. The motivation for the Ducktail campaign is financial gain, and has been likened by WithSecure to the SilentFade malware identified by Facebook at the end of 2018.

#Ms office 2016 activation key facebook update

The researchers are confident that the malware is Vietnamese in origin, has no specific geographic nor vertical sector target, has been in continuous update and modification since H2 2021, and that the actor has been active since late 2018. It is WithSecure’s first known malware specifically focusing on Facebook business accounts. It has named the operation and malware Ducktail and has been tracking it since discovery.

WithSecure –- formerly F-Secure – first detected the infostealer as an unknown malware earlier this year. The campaign uses an infostealer specifically designed to steal browser cookies for authenticated Facebook sessions to steal information from the account and ultimately hijack any business account that the victim can access. An ongoing spear phishing campaign has been targeting Facebook business accounts since the second half of 2021.