Hackers pushing fake Bitwarden updates hit thousands of devices with data stealing malware
Briefly

from TechRadar3 months ago
Bitdefender has warned hackers are using the Facebook advertising platform to trick Bitwarden users into installing a fake security update that steals personal data and credit card information from businesses and individuals alike.
TechRadarhttps://www.techradar.com/pro/hackers-pushing-fake-bitwarden-updates-hit-thousands-of-devices-with-data-stealing-malware
Once lured to the fake Chrome Web Store, users then download a zip file that is manually loaded as a Chrome browser extension using Developer mode, avoiding the usual security checks that would take place when adding a browser extension.
TechRadarhttps://www.techradar.com/pro/hackers-pushing-fake-bitwarden-updates-hit-thousands-of-devices-with-data-stealing-malware
The malware also uses a background.js script to harvest data from Facebook cookies, including information on location and IP address, and uses the Facebook Graph API to extract all of the stolen data to the hackers C2 server.
TechRadarhttps://www.techradar.com/pro/hackers-pushing-fake-bitwarden-updates-hit-thousands-of-devices-with-data-stealing-malware
Bitdefender recommends that users and security teams keep an eye out for extensions that request excessive permissions, as well as those with obfuscated functions such as 'chrome.runtime.onInstalled.addListener'.
TechRadarhttps://www.techradar.com/pro/hackers-pushing-fake-bitwarden-updates-hit-thousands-of-devices-with-data-stealing-malware
Read at TechRadar
#cybersecurity #malware #phishing #data-theft #facebook-ads
[
|
]