Trojan:JS/Febipos.A

Posted: May 13, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	9/10
Infected PCs:	26

First Seen:	May 13, 2013
Last Seen:	March 9, 2020
OS(es) Affected:	Windows

Trojan:JS/Febipos.A is a Brazilian Trojan that attempts to hijack the PC user's Facebook profile. Somewhat unusually, Trojan:JS/Febipos.A is designed to target specific brands of browsers, but eschews Internet Explorer in favor of Chrome and Firefox. Once it compromises your browser, Trojan:JS/Febipos.A is capable of posting comments, likes, sharing links, inviting other Facebook members to a group and other features that are standardized across the Facebook platform. Since the links Trojan:JS/Febipos.A has been spreading have since been shut down, the final payload for these attacks remains unclear, but SpywareRemove.com malware research team consider it probable that Trojan:JS/Febipos.A is being used to spread other forms of malware. Deleting Trojan:JS/Febipos.A, like all kinds of malicious software, should use an appropriate anti-malware product – preferably while any affected browsers are closed, to prevent Trojan:JS/Febipos.A from interfering with its own deletion.

Making Your Facebook into a Book of Spam

First identified by Microsoft, Trojan:JS/Febipos.A inhabits the somewhat unusual domain of a browser add-on whose attacks aren't confined to those of low-level threats, like the typical browser hijacker, PUP or adware program. Instead of restricting itself to browser redirects or pop-ups, Trojan:JS/Febipos.A makes an effort to take over your entire Facebook account, gaining access to many of its features. Trojan:JS/Febipos.A's configuration file alters its capabilities somewhat, but many of its major features are as follows:

Commenting on posts.
Liking web pages.
Sharing links.
Creating new posts for your profile.
Joining groups.
Issuing group invitations to your Facebook contacts.
Sending Chat messages to your Facebook contacts.

By default, Trojan:JS/Febipos.A attempts to propagate a fake news link in Portuguese (the dominant language of Brazil). Fortunately, Facebook already has blocked this link. However, Trojan:JS/Febipos.A has been seen in multiple versions and may update its link to, once again, be a danger to your PC.

Cleaning Your Facebook of Trojan:JS/Febipos.A's Babble

In addition to being specific to the Chrome and Firefox browsers, Trojan:JS/Febipos.A is a JavaScript-based PC threat and may be hindered by anti-JavaScript functions. However, to remove Trojan:JS/Febipos.A, SpywareRemove.com malware researchers suggest using scanning your PC with appropriate anti-malware products. Ideally, you should try to delete Trojan:JS/Febipos.A from Safe Mode, and with all browsers closed, to minimize any chances of Trojan:JS/Febipos.A or related PC threats impeding the disinfection routine.

Based on the current statistics of its Facebook links (with regards to 'likes' and related Facebook forms of promotion), SpywareRemove.com malware experts estimate that several thousand PCs already are infected with Trojan:JS/Febipos.A, which seems to be targeted at Brazilian PCs in particular. This number is growing slowly but steadily, and appropriate browser-based precautions should be used to protect your browser from any attempts to compromise it with Trojan:JS/Febipos.A.

Technical Details

Additional Information

The following messages's were detected:

#	Message
1	GAROTA DE 15 ANOS VÃ TIMA DE BULLYING COMETE SUICÃ DIO APÃ“S MOSTRAR OS SEIOS NO FACEBOOK VÃ¬deo no link abaixo:<Currently unavailable link> Translation from Portuguese into English: 15 YEAR-OLD VICTIM OF BULLYING COMMITS SUICIDE AFTER SHOWING HER BREASTS ON FACEBOOK. Video on the link below: <Currently unavailable link> The link mentioned above is unavailable, and has been blocked. Trojan:JS/Febipos.A even strives to 'like' and 'comment' on a Facebook page. Trojan:JS/Febipos.A may even post links on Facebook profiles.

Message

GAROTA DE 15 ANOS VÃ TIMA DE BULLYING COMETE SUICÃ DIO APÃ“S MOSTRAR OS SEIOS NO FACEBOOK
VÃ¬deo no link abaixo:<Currently unavailable link>
Translation from Portuguese into English:
15 YEAR-OLD VICTIM OF BULLYING COMMITS SUICIDE AFTER SHOWING HER BREASTS ON FACEBOOK.
Video on the link below: <Currently unavailable link>
The link mentioned above is unavailable, and has been blocked. Trojan:JS/Febipos.A even strives to 'like' and 'comment' on a Facebook page. Trojan:JS/Febipos.A may even post links on Facebook profiles.