The revamped malware is targeting an even wider range of Facebook users than before.
According to Zscaler, the threat actor behind the Ducktail Infostealer recently revamped the malware to expand its scope. The new version of the malware is written in PHP and targets users with any level of access to Facebook Business accounts. This malicious software masquerades as an application installer for Microsoft Office, various games, and more which are available for download on legitimate file hosting websites, such as MediaFire. Researchers at the cybersecurity company Zscaler have discovered a new version of the Ducktail Infostealer in a malware campaign seeking to steal Facebook Business account credentials. Cybersecurity researchers first identified the Ducktail Infostealer in 2021, attributing the bit of malware to a Vietnamese threat actor.
