Since November 2024, a malicious campaign has targeted Bitwarden users through deceptive Facebook ads. These fake security updates redirect victims to phishing pages. Bitdefender, with its tools like Scamio, is committed to detecting these threats and educating users on best cybersecurity practices.
An elaborate fraud that targets European users
On November 3, 2024, Bitdefender Labs detected a phishing campaign which operates the Bitwarden brand. This attack uses Facebook ads to trick users into installing a malicious extension under the pretext of a security update. The campaign targets 18-65 year olds in Europe, but could expand globally if it is not stopped. These ads redirect victims to pages that perfectly imitate le Chrome Web Storewhere they download a fraudulent extension. Once installed, the latter collects personal and professional data. It will then endanger the Facebook accounts and finances of the victims.
A sophisticated and targeted threat
According to Bitdefender, attackers are exploiting the flaws of platforms like Facebook and Google Drive. They manipulate users to bypass browser protections. This is done by activating developer mode to install the extension. This malware then accesses Facebook cookies, intercepts online activities and collection of sensitive information such as billing data and identifiers. Bitdefender points out that the malicious script leverages Facebook APIs to extract valuable information. The data is then sent to a remote server to make it difficult to intercept.
Preventing attacks: recommendations for users
Users should be vigilant against these sophisticated strategies. Bitdefender recommends never install an extension via external links or advertisements. It is best to check directly updates on official extension stores. Browser security settings should be strengthened to prevent unauthorized installation of extensions. Bitdefender also offers its Scamio tool, capable of detecting and reporting fraudulent links in real time.
« Scamio is an essential solution to protect Internet users against online threats, offering them a real shield against scams », Specifies the Bitdefender team. Users can limit the risks associated with these types of attacks with enhanced security measures and more attention to red flags. This campaign illustrates once again the importance of remaining vigilant in the face of increasingly sophisticated cyber threats.
Article based on a press release received by the editorial staff.
Share the article:
Facebook
LinkedIn
Our blog is powered by readers. When you purchase through links on our site, we may earn an affiliate commission.
