New Malware Sets Sights on Stealing Your Facebook Business Account

December 13, 2023

With so many businesses putting time and effort to cultivate an active following on social media, it only makes sense that cybercriminals try to get a piece of the pie.

A new malware strain particularly targets Facebook business accounts to run malicious advertising campaigns on your dime.

“Professional” Budget Tracking Templates Spread Social Media Malware

The cybercriminals behind this one definitely understand their audience. They’ve created malware that poses as a free budgeting spreadsheet that users can open up in Microsoft Excel or Google Sheets. So far, most of the cases reported involve the cybercriminals offering the tool via Facebook, specifically to business page admins, through Facebook Messenger. It’s likely that these “resources” can be shared in plenty of other ways as well.

Once opening the file, the malware “NodeStealer” is installed (although in some cases, it came with additional malware that could steal cryptocurrency, disable Microsoft Defender, and more). It then steals your social media credentials, in particular, your Facebook business credentials, and compromises your accounts so criminals can quickly deploy ads using your financial information to spread more malware.

If you’ve ever had any experience trying to work with Facebook to reclaim an account (or get any kind of professional support as a small business on the social network) you probably can guess how painful this can become if your organization values its social media presence.

How to Avoid this Cyberthreat

Like most threats, it comes down to thinking before you click. If someone you don’t know is randomly offering you a free resource, do a little research before you just click on it and download it. If something seems suspicious, it probably is.

Also, make sure you have multi-factor authentication set up for your Google, Facebook, Microsoft, LinkedIn, and Twitter/X accounts, as well as any other accounts that offer it. This is a huge additional layer of security that will keep most bad guys out of your stuff even if your passwords become compromised.

Of course, if you think something has been compromised, you should also update all of your passwords.

Looking to avoid cyberthreats and secure your business? Give us a call at (571) 470-5594 to talk about how we can keep your organization safe.

Three Ways SMBs Combat Mobile Malware

Mobile malware might not have a lot of attention on it, but it can be a significant problem for organizations that rely on smartphones. This goes double for small businesses that typically don’t have the large teams and big budgets for their mobile strategies that include devices, data and phone plans, and security controls. Today, we’ll look at mobile malware and how an organization with a limited budget can keep it from impacting its business.

September 4, 2024

You Should Be Aware of These Two Productivity Pitfalls

Technology has empowered us to achieve more than ever, but with that progress comes increased expectations for everyone. This means greater productivity, and the pressure to perform can be relentless at times, making it crucial to find efficient ways to manage our tasks. Unfortunately, there is a natural limit to how much we can accomplish, and certain challenges can push us to that limit faster. Today, we want to explore two of the most common productivity pitfalls.

September 2, 2024

Cybersecurity Solutions for Remote and Hybrid Work

Remote work has been a mainstay in most businesses’ standard operating procedures in at least some capacity, but it opens up a nasty can of worms regarding cybersecurity. If cybersecurity is not your top priority, and you have remote or hybrid employees, we need to have a talk—and probably a hard one.