Browser Plug-in Steals Facebook Logins, Pumps Spam For GM Cars

Microsoft warns that malicious Chrome and Firefox browser extensions observed mainly in Brazil bundle the Febipos.A trojan, which harvests Facebook credentials and remotely-controlledly automates spam (posting, liking, commenting and inviting) to promote links such as a GM Celta car page; the trojan fetches configuration and commands from a remote site and abuses browser plug-ins as the infection vector.