Security firm WithSecure has discovered a new threat actor named DUCKPORT focused on infecting users with malware in order to hijack accounts that have access to Facebook's advertising and business platforms.
WithSecure says the group is based in Vietnam and appears to have spun out of a group named DUCKTAIL.