Facebook users warned vs 'profile viewer' addon

Users of Facebook were warned over the weekend against a so-called "Profile Viewer" browser addon claiming to let them see who is stalking them on the social networking giant.

 

The addon is actually a the "Carfekab" Trojan that threatens to spread via severeal .tk domains registered for malicious purposes, according to security vendor Bitdefender.

 

"The browser extension fraudulently gathers ‘likes’ and spreads from one timeline to another. The downloaded '.exe' installs a malicious file, detected by antivirus software Bitdefender as Trojan.JS.Carfekab.A," Bitdefender researcher Bianca Stanescu said in a blog post.

 

Stanescu said that while the Trojan can be used for browser spying, it can also post messages on users’ behalf and send their personal data to the attackers’ servers.

 

It can spread through Facebook messages where victims can unwittingly tag their friends, she said.

 

"Malware writers gain immediate access to victims’ contact lists after they click on the dangerous web site. By showing that the victim’s friends liked the app and tagging them, cyber-crooks increase both the scam’s credibility and its spreading rate on Facebook," she said.

 

Also, she said the Trojan allows cyber-criminals to spread several variations of the scam.

 

So far, she said over 111 million users clicked the Like button on Facebook’s product and service page, and scammers pretend the same number likes theirs.  — ELR, GMA News