Digmine Virus Spreads Via Facebook Messenger
ID: 7a0d25a7-e599-5391-925f-10479dfe7b77
STIX ID: report--7a0d25a7-e599-5391-925f-10479dfe7b77
Feed Name: Binary Defense Blog
Threat Score
A Monero-mining malware called "Digmine" is spreading via Facebook Messenger by luring users to open a ZIP (video_xxxx.zip) that contains an AutoIt executable; once executed it downloads mining components from a remote C2, installs persistence, and launches a malicious Chrome extension to hijack victims' Facebook accounts and propagate to their contacts — infections were observed across multiple countries and mobile Messenger access is not affected.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.