You Are Here: Home » E-Threats » Google Chrome App Grabs Identities, Forges Blogs in Victims’ Name to Promote Scam

Google Chrome App Grabs Identities, Forges Blogs in Victims’ Name to Promote Scam

A Google Chrome app that promises to change the color of Facebook accounts instead nabs authentication cookies and generates dozens of blogs registered to the victims’ Gmail address,  in a new scam analyzed by Bitdefender Labs.

Google Chrome App Grabs Identities, Forges Blogs in Victims’ Name to Promote Scam

Once the malicious app is installed from Google’s Chrome Web Store, it starts displaying a large Google Ads banner redirecting users to a “work from home scam.” When clicking the sign-up link, users are redirected to a fraudulent website.

“Scammers gave a new twist to the old change-your-Facebook-color scheme that’s been luring users to fraudulent websites to grab credentials and other sensitive data,” says Chief Security Strategist Catalin Cosoi. “By creating dozens of blogs for a single account, the scam spreads like wildfire among Facebook friends.”

Google Chrome App Grabs Identities, Forges Blogs in Victims’ Name to Promote Scam

 The blogs generating under the e-mail address of the victims, which are used in further disseminating the scam, have registered a large number of hits among users in the US, the UK, Germany, Spain, Romania, and other countries.

 The app can also posts wall messages on the victims’ account. The messages use friend tagging to convince the victim’s friends to visit the blog domains. Each time the app posts on a users’ timeline, it links to one of the auto-generated blogs as to avoid blacklisting.

Google Chrome App Grabs Identities, Forges Blogs in Victims’ Name to Promote ScamGoogle Chrome App Grabs Identities, Forges Blogs in Victims’ Name to Promote Scam

 Bitdefender encourages users to use an antivirus solution and the free application Safego, which protects Facebook and Twitter accounts from scams, spam, malware and private data exposure.

This article is based on the technical information provided courtesy of Andrei Serbanoiu, Bitdefender Software Analyst.

All product and company names mentioned herein are for identification purposes only and are the property of, and may be trademarks of, their respective owners.

About The Author

Security Researcher

Liviu Arsene is the proud owner of the secret to the fountain of never-ending energy. That’s what’s been helping him work his everything off as a passionate tech news editor for the past couple of years. He is the youngest and most restless member of the Bitdefender writer team and he covers mobile malware and security topics with fervor and a twist. His passions revolve around gadgets and technology, and he’s always ready to write about what’s hot and trendy out there in geek universe.

Number of Entries : 152

Comments (1)

Leave a Comment

© 2012 Powered By Bitdefender

x
Loading...
Scroll to top