Hackers have been detected breaking into popular verified Facebook pages and using them to run ads on the social media behemoth distributing malware.
Social consultant Matt Navarra (opens in new tab) first spotted the malicious campaign, outlining the danger on Twitter.
Navarra noted whoever is behind the campaign first targeted popular Facebook pages (one of the victims has more than seven million followers and has been active for over a decade). Should they gain access, they would change the page’s name into a variant of Meta (Facebook’s parent company), or Google.
Cheeky scams
Then, they would purchase an ad on the social media network, in which they would target page managers and advertising professionals. “Because of security issues for upcoming users, you can no longer manage ad accounts in the browser,” the ad reads. “Switch to a more professional and secure tool,” the ad concludes, before sharing an obviously fraudulent download link.
There are multiple issues with this campaign, Navarra says, including how the accounts were breached, how Facebook allowed the threat actors to change the page’s name into something seemingly related to Meta and keep the blue checkmark, and how they managed to actually buy and run ads which are obviously redirecting the target audience to a shady website, at best.
Facebook has since disabled all of the affected accounts, and shut down the malicious campaigns, TechCrunch further reported. It also said that Facebook pages now show if the page changed its name in the past, and from what, which is a welcome addition to bolster transparency.
“We invest significant resources into detecting and preventing scams and hacks,” a Meta spokesperson told TechCrunch. “While many of the improvements we’ve made are difficult to see – because they minimize people from having issues in the first place – scammers are always trying to get around our security measures.”
Via: TechCrunch (opens in new tab)
English
Arabic
Belarusian
Bengali
Bosnian
Bulgarian
Chinese (Simplified)
Croatian
Czech
Danish
Dutch
Estonian
Filipino
Finnish
French
Georgian
German
Greek
Gujarati
Hausa
Hebrew
Hindi
Hmong
Hungarian
Igbo
Indonesian
Italian
Japanese
Javanese
Kazakh
Korean
Kurdish (Kurmanji)
Kyrgyz
Lao
Latvian
Lithuanian
Macedonian
Malagasy
Norwegian
Persian
Polish
Portuguese
Punjabi
Romanian
Russian
Serbian
Slovak
Slovenian
Spanish
Swedish
Thai
Turkish
Ukrainian
Vietnamese
Yoruba