1. Cybercriminal groups in Vietnam are increasingly targeting Facebook and Meta Business accounts, using lure themes shared through email and social media to infect victims with information-stealing malware.
2. The stolen information, such as Facebook session cookies and login credentials, allows the attackers to gain access to the targeted accounts and run fraudulent ads.
3. The attackers sell ads to other cybercriminals, enabling them to make money through extortion, defamation, and running fraudulent advertisements.
4. Two threat clusters, Ducktail and Duckport, have been identified as being involved in these attacks, with Ducktail recently expanding to target X advertising accounts.
5. The involvement of multiple groups indicates a certain level of engagement and specialization within the cybercriminal space.
6. Meta, as the second-largest advertising platform globally, attracts threat actors looking to abuse the platform for financial gain.
#Cybersecurity #MalwareAttacks #FacebookThreats #FraudulentAds #Cybercriminals #Vietnam
https://www.infosecurity-magazine.com/news/facebook-accounts-targeted-vietnam/