Winsage
July 15, 2024
Threat actors are using Facebook advertisements to promote fake Windows themes, free game downloads, and software activation cracks for popular applications. They hijack existing Facebook business pages or create new ones to reach a wider audience. The ads lead users to webpages hosting malware disguised as the promoted content. The malware steals data, including web browser cookies and Facebook account information, which can be sold or used for further malicious activities. This malvertising campaign has targeted a wider audience by moving away from adult-themed clickbaits to more general advertisements like Windows themes and AI-based software tools.