Zum Inhalt der Seite gehen

Suche

Beiträge, die mit FACEBOOK getaggt sind


NodeStealer Malware targets Facebook Ad Accounts and harvesting Credit Card Data.

Threat hunters are warning about an updated version of the Python-based NodeStealer that's now equipped to extract more information from victims Facebook Ads Manager accounts and harvest credit card data stored in web browsers.

https://www.netskope.com/blog/python-nodestealer-targets-facebook-ads-manager-with-new-techniques

#facebook #socialmedia #ads #malware #it #security #privacy #engineer #media #tech #news
"They collect budget details of Facebook Ads Manager accounts of their victims, which might be a gateway for Facebook malvertisement," Netskope Threat Labs researcher Jan Michael Alcantara said in a report. "New techniques used by NodeStealer include using Windows Restart Manager to unlock browser database files, adding junk code and using a batch script to dynamically generate and execute the Python script."

NodeStealer, first publicly documented by Meta in May 2023, started off as JavaScript malware before evolving into a Python stealer capable of gathering data related to Facebook accounts in order to facilitate their takeover.

The latest analysis from Netskopke shows that NodeStealer artifacts have begun to target Facebook Ads Manager accounts that are used to manage ad campaigns across Facebook and Instagram, in addition to striking Facebook Business accounts.
[ImageSource: Netskope Threat Labs]

"We recently found several Python NodeStealer samples that collect budget details of the account using Facebook Graph API," Michael Alcantara explained. "The samples initially generate an access token by logging into adsmanager.facebook[.]com using cookies collected on the victim's machine."

Aside from collecting the tokens and business-related information tied to those accounts, the malware includes a check that's explicitly designed to avoid infecting machines located in Vietnam as a way to evade law enforcement actions, further solidifying its origins.
[ImageSource: Netskope Threat Labs]

On top of that, certain NodeStealer samples have been found to use the legitimate Windows Restart Manager to unlock SQLite database files that are possibly being used by other processes. This is done so in an attempt to siphon credit card data from various web browsers.

Data exfiltration is achieved using Telegram, underscoring that the messaging platform still continues to be a crucial vector for threat actors despite recent changes to its policy.

Malvertising via Facebook is a lucrative infection pathway, often impersonating trusted brands to disseminate all kinds of malware. This is evidenced by the emergence of a new campaign starting November 3, 2024, that has mimicked the Bitwarden password manager software through Facebook sponsored ads to install a rogue Google Chrome extension.

<https://www.bitdefender.com/en-us/blog/labs/inside-bitdefender-labs-investigation-of-a-malicious-facebook-ad-campaign-targeting-bitwarden-users>


Videospielgeschichten war schon immer ein Gemeinschaftsprojekt. Deshalb möchte ich heute auf zwei Kanäle von VSG hinweisen, die den Austausch mit euch erweitern: Discord und Facebook.

https://www.videospielgeschichten.de/editorial-11-24-discord-und-facebook/

#Gaming #Blog #Videospielgeschichten #Discord #Facebook


Instrumentalisierung der #Shoa und Gleichsetzung der militärischen Aktionen #Israels in #Gaza mit der industriellen Vernichtung der #Juden Europas - Post in der #Facebook Gruppe der #PalästinensischeGemeindeBonn


L' #Onu si esprime sui post che #Meta e #TikTok hanno cancellato e cancellano, quando si tratta di #Palestina : https://www.instagram.com/p/DChVokpuEpe/

era evidente fin dall'inizio ed è stato evidente per tutto un anno, e lo è tutt'ora, qual è il comportamento dei #social.

thus...
will #Facebook one day be held accountable for complicity in hiding news about the #genocide?

#Gaza #Palestine #genocidio


So my partner posted a quote by Hannah Arendt on Facebook: "The death of human empathy is one of the earliest and most telling signs of a culture about to fall into barbarism."

People have been blocked from seeing it.

Zuckerberg is as much of a fascist stooge as Musk. Do he not look to Putin's Russia and see how the oligarchs were treated there? Does Zuckerberg honestly believe that the Trumps and Musk won't steal his empire from him? If he does, he's a fool.

#FaceBook #Fascism #Trump
Quote saying:
"The death of human empathy is one of the earliest and most telling signs of a culture about to fall into barbarism.
Hannah Arendt German-born American, historian, philosopher, political theorist and social critic (1906 — 1975)"
Facebook message saying: "This content isn't available at the moment When this happens, it's usually because the owner only shared it with a small group of people, changed who can see it, or it's been deleted."


#Blog Wat #Boycot ik niet?
#Gokken #Auto's #Facebook #Creditcard #Amazon
https://ximaar.wordpress.com/2024/10/31/boycot/


I somehow ended up in a FB comment section where a mom posted a photo of the mess in her house.

The comments are all along the lines of
"Keeping your house tidy is easy! I enjoy doing it so much! You just have to know where the place of everything is, and you have to put things back in their place every time!"

...
...
...

I think I might have pulled an optical nerve rolling my eyes.

#parenting #SocialMedia #WTF #Facebook #nope


My entire Facebook account (with all my connected pages and groups) was suspended without warning yesterday & my appeal was denied. I shared a post about this on Medium:

AI Facebook Suspension
https://medium.com/@wfryer/ai-facebook-suspension-c720087cf931

#edtechSR #MediaLit #SocialMedia #Facebook #AI


FB just asked me if I want AI to answer questions in my group for me and "generate activity" and, to quote Dorothy Parker

What fresh hell is this

#Facebook #SocialMedia #WTF #AI


Tiny Mastodon Tip About Blocking Threads/Meta :facebook::nes_fire:

With this week's news
about Meta starting to test Threads integration with ActivityPub (the protocol that makes the Fediverse interconnected): https://techcrunch.com/2023/12/13/meta-starts-testing-threads-integration-with-activitypub/

Many people, like myself,
might feel uneasy about this. There are many reasons to be:

Whether it is due to Meta's (mal)practices when it comes to moderation, disinformation, politics, or problematic privacy, to say the least, your discomfort with this is very valid :valid:

On Mastodon,
know that you can pre-block a whole domain at the account level ⛔️

Now, this is not a complete solution and might not prevent all of your data from passing through, but it should prevent Threads accounts on these instances from following you and seeing most of your posts, and you theirs.

HOW TO ❓

1. On desktop, go to "Preferences" > "Import and export"

2. On your computer, create a text file and copy the 2 following lines in it:

threads.instagram.com
threads.net

3. Change the ".txt" extension of this file to ".csv"

4. Go back to Mastodon's Preferences and go to the "Import" section in the left side menu.

5. There, for "Import type" select "Domain blocking list"

5.1. On the right, make sure to select "Merge" and not Overwrite in order to keep your previously blocked Domains, if you had any.

5.2. In "Data" on the left, click on "Browse" and select the ".csv" file you just wrote.

5.3. Click "UPLOAD" at the bottom.

6. You will then see a message to confirm. Click "CONFIRM" :blocky_white_cursor:

7. Done! And good riddance! :blobcatrainbow:​​✨

#TinyMastodonTip #Mastodon #Meta #Threads #Facebook #Privacy


If we would invest 50% of the energy wasted on all these #Facebook discussions to make the #Fediverse actually better on our collective terms — THAT would be better ;)


Don't be naive, people. #Facebook is only interested in collecting more data and to connect that data to profiles to feed to the ad machinery. If #ActivityPub can be used for that, they will give it a try. That's it. That's all. It's still Facebook.


#Meta klaut sich die Ideen bei der Konkurrenz zusammen, ist das eigentlich erlaubt?

Vor Jahren hab ich damit begonnen #Telegram zu nutzen, wegen der "Kanäle" die es dort gibt und den viel umfangreicheren Features, die Gruppen betreffend.

Jetzt lese ich, dass #Whatsapp bald "Kanäle" einführt, Videonachrichten usw.

Waren das noch Zeiten, als #Facebook seine Konkurrenten gekauft hat, jetzt klauen sie sich die Features nur noch zusammen?

Ist das rechtlich wirklich so einfach?

#followerpower