TotalDefense reports a new facebook Trojan which shares and likes on behalf of the user; this malware is transmitted through a browser plugin found so far in FireFox and Chrome. Visit http://blogs.totaldefense.com/securityblog.aspx for cloud-based endpoint security solutions for home and businesses.

1. New Facebook Trojan will do Shares and Likes on your behalf.
A new Trojan is infecting Facebook and distributes itself by sharing links on your behalf.
This new malware attack focuses on the users' Facebook profile. The malware is a Trojan Horse
transmitted through a browser plugin, detected so far in Firefox and Chrome.
Tracking shows that the Trojan horse was first identified in Brazil, and its main activity is monitoring
and testing whether the user logged into Facebook account. If the user is connected, the malware tries
to get the configuration file that includes list of gestures that the Trojan could use on behalf of the
user.
Among the various gestures that the Trojan horse can run after obtaining the file, is the ability to post
‘Likes’ as well as ‘Share’ information, advertise new content and even join and invite friends to various
Facebook groups.
In addition, the Trojan horse comments on posts and open chat conversations with connected friends,
apparently in order to send them a link to install the harmful plugin. Between the posts published by
the Trojan horse one can find links and videos that tries to break into the accounts of users, while
those believe they are watching funny and informative video posted by innocent members.
The Trojan horse may include much more than just hacking attempts to Facebook accounts, because
the messages, links and videos published vary from time to time, as well as the pages to which it
performs ‘Likes’. While Facebook is working to block these links, it seems they multiple in a faster
rate, and users can fall victim to reveal their information, without intending to do so.
Currently, Facebook's main recommendation is to update your security programs, and of course
perform scans regularly and frequently. This of course alongside with the permanent recommendation
that comes each time new malware is infecting Facebook: Do not click on suspicious pages, links or
videos, even if they come directly from your friends.
Copyright © 2013 TotalDefense, Inc. | All rights reserved www.totaldefense.com
Page 1

2. Our recommendation is to check your Facebook account and particularly your personal Profile page,
make sure there have not been any published links on your behalf, and of course change your password
to a much more sophisticated one, and do not use it also in other services.
About TotalDefense:
Total Defense(@Total_Defense) is a global leader in malware detection and anti-crimeware solutions.
We offer a broad portfolio of leading security products for the consumer market used by over four
million consumers worldwide. Our solutions also include the industry’s first complete cloud security
platform, providing fully integrated endpoint, web and email security through a single Web-based
management console with a single set of enforceable security policies
Total Defense is a former business of CA Technologies, one of the largest software companies in the
world, and has operations in New York, California, Europe, Israel and Asia.
Visit http://www.totaldefense.com/ for web, cloud & mobile security solutions for home users and
businesses.
Copyright © 2013 TotalDefense, Inc. | All rights reserved www.totaldefense.com
Page 2