This isn’t the first time Facebook users have been targeted in this kind of attack, in fact, so pervasive is the phishing problem for Facebook that they created a dedicated email address, where users can forward suspect emails for inspection.
< /dev/null is used to instantly send EOF to the program, so that it doesnt wait for input ( /dev/null, the null device, is a special file that discards all data written to it, but reports that the write operation succeeded, and provides no data to any process that reads. It is detected by most antivirus products but is identified by a number of different names.ĭanchev lists a number of IP addresses and related domains implicated in this campaign. exploitation drops this Win32 executable on its victims. He also claims that the malicious payload and exploits appear to be hosted on a ‘ceredinopleru,’ whereas the compromised website that the email links to is ‘covellgroupcom/new.htim?_RAINDOM_CHARACTERS.’ In his write-up on Webroot’s Threat Blog, Danchev identifies CVE-2010-0188, an Adobe bug patched in 2010, as an example of an exploit served in the attack. However, it also contains a typo that is indicative of the sorts of writing errors that have become a hallmark of spam campaigns in general.
The malicious email, which can be seen below, is crafted to and does a serviceable job of mimicking Facebook’s widely-recognizable interface.
#Devnull facebook login series#
Attackers are sending spoofed “pending notification” emails to Facebook users, claiming that the recipients overlooked some alert on the world’s largest social network, and providing them with a link that supposedly leads to the allegedly neglected content but which, in reality, funnels users to a series of compromised websites hosting the Black Hole Exploit Kit, according to researcher Dancho Danchev. Steps:- go to facebook settings- when you confirm blackhole make sure not to enter your password- remove your email and add a new email or you can still use.
0 kommentar(er)
