Home Malware Programs Trojans TROJ_FOOKBACE.A

TROJ_FOOKBACE.A

Posted: January 31, 2012

Threat Metric

Threat Level: 2/10
Infected PCs: 489
First Seen: January 31, 2012
Last Seen: January 6, 2023
OS(es) Affected: Windows

TROJ_FOOKBACE.A is a malicious Trojan that is involved in the malicious attack and spreads via Facebook posts on Valentine's day. This particular attack begins with a post on the infected user's wall inviting other users to install a Valentine's theme into their Facebook profile. Once a user clicks on this post, he/she is redirected to another page that forces them to install the said theme. This attack only works on either Google Chrome or Mozilla Firefox browsers. Clicking the 'Install' button on the page will urge the download of the malicious file named FacebookChrome.crx which is detected as TROJ_FOOKBACE.A. Once executed, TROJ_FOOKBACE.A runs a script that is able to display ads from certain websites. TROJ_FOOKBACE.A also installs itself on the on the user's web browser as an extension named Facebook Improvement |Facebook.com. Once this malicious browser extension is installed, it will control the user's browsing activities and redirect their page to a survey page which asks them for their mobile number. Users who clicked on the post using Internet Explorer (IE) will be redirected to the same survey, without them being asked to download anything. If your PC has been corrupted by TROJ_FOOKBACE.A, get rid of it as early as possible.

Technical Details

Additional Information

The following URL's were detected:
vip-lady-dreams.com
Loading...