Welcome to the First Column IT Tech Blog

New Malware Sets Sights on Stealing Your Facebook Business Account

New Malware Sets Sights on Stealing Your Facebook Business Account

December 13, 2023

With so many businesses putting time and effort to cultivate an active following on social media, it only makes sense that cybercriminals try to get a piece of the pie.

A new malware strain particularly targets Facebook business accounts to run malicious advertising campaigns on your dime.

“Professional” Budget Tracking Templates Spread Social Media Malware

The cybercriminals behind this one definitely understand their audience. They’ve created malware that poses as a free budgeting spreadsheet that users can open up in Microsoft Excel or Google Sheets. So far, most of the cases reported involve the cybercriminals offering the tool via Facebook, specifically to business page admins, through Facebook Messenger. It’s likely that these “resources” can be shared in plenty of other ways as well.

Once opening the file, the malware “NodeStealer” is installed (although in some cases, it came with additional malware that could steal cryptocurrency, disable Microsoft Defender, and more). It then steals your social media credentials, in particular, your Facebook business credentials, and compromises your accounts so criminals can quickly deploy ads using your financial information to spread more malware.

If you’ve ever had any experience trying to work with Facebook to reclaim an account (or get any kind of professional support as a small business on the social network) you probably can guess how painful this can become if your organization values its social media presence.

How to Avoid this Cyberthreat

Like most threats, it comes down to thinking before you click. If someone you don’t know is randomly offering you a free resource, do a little research before you just click on it and download it. If something seems suspicious, it probably is.

Also, make sure you have multi-factor authentication set up for your Google, Facebook, Microsoft, LinkedIn, and Twitter/X accounts, as well as any other accounts that offer it. This is a huge additional layer of security that will keep most bad guys out of your stuff even if your passwords become compromised.

Of course, if you think something has been compromised, you should also update all of your passwords.

Looking to avoid cyberthreats and secure your business? Give us a call at (571) 470-5594 to talk about how we can keep your organization safe.

Previous Post
May 30, 2024
How You Can Increase Your Customers’ Satisfaction Levels
Today's consumers are exceptionally knowledgeable, which makes you need to prioritize a proactive approach to creating exceptional customer experiences to build lasting relationships. Let’s explore strategies for enhancing customer satisfaction and retention.
May 23, 2024
6 Critical Considerations for Effective IT Inventory Management
Managing your organization's technology can pose unexpected challenges. Firstly, many businesses overlook their technology as long as it functions adequately. Secondly, technology turnover within an organization can be rapid. In this month's newsletter, we'll go into essential steps for gaining control over your technology inventory.
May 21, 2024
3 Benefits that Come with a Managed Service Agreement
Technology presents a significant challenge for businesses of all sizes, whether you're a quaint family-run shop or a swiftly expanding enterprise. The upkeep of technology—from hardware like computers and servers to software solutions and point-of-sale systems—is a perpetual task. This month, we aim to explore how managed IT solutions can optimize your resources by providing a straightforward, convenient, and cost-efficient alternative to hiring multiple in-house technicians.

Have a project in mind?

Start with our free consultation for VA, DC and MD companies. We will provide a detailed proposal and firm quote based on your specific IT support needs. All at a predictable monthly cost per seat.
Free Consultation - Sign Up Here