NodeStealer 2.0 hijacks Facebook business accounts
Unit 42 researchers recently uncovered a previously unreported phishing campaign that distributed an infostealer capable of completely taking over Facebook business accounts. Facebook business accounts were attacked with a phishing lure that offered tools such as business spreadsheet templates. This is part of a growing trend of attacks targeting Facebook business accounts for ad fraud and other purposes. The trend started in July 2022 with the discovery of the info-stealer Ducktail. Phishing targets Facebook business accounts About eight months later, in March 2023, FakeGPT, a new variant of a fake…