Yet another insidious Facebook scam aiming to steal users’ hard-earned money has come to light this week. According to a team of security researchers at Zscaler, a new version of an information-stealing malware called Ducktail has been targeting Facebook Business accounts to steal sensitive financial information. 

The researchers say that this malware is often hidden in ZIP files made to look like Microsoft Office applications, games, and porn-related files. However, the bad actors behind the scam are constantly changing it to make it hard to track or detect. 

“Campaigns to-date have focused on taking over Facebook Business accounts, both to manipulate pages and to access financial information,” the security researchers wrote in their report. “It seems that the threat actors behind the Ducktail stealer campaign are continuously making changes or enhancement in the delivery mechanisms and approach to steal a wide variety of sensitive user and system information targeting users at large.”

While this malware may be particularly sophisticated, the methods of how it reaches users are not. That’s why it’s always a good idea to be careful what links you interact with on Facebook, and to never download a file from an account you don’t know. These scams are constantly evolving, but users can stop them dead in their tracks by not falling for them in the first place. 

Recommended Resources

Choose what the experts use: award-winning cybersecurity you can trust and rely on.

Surf the web truly incognito. Try Bitdefender Premium VPN, the ultra-fast VPN that keeps your online identity and activities safe from hackers, ISPs and snoops.

System Mechanic 14 – Make your computer run like new. Winner of 200+ Editor’s Choice awards!