Facebook Messenger virus sends messages to victim's friends automatically
Facebook Message virus is malicious software that compromises victim's Facebook account and sends messages containing a malicious link to all of his/her friends. Spam messages deliver a shortened link that appears to be a video. Once clicked, the malicious URL redirects to a phishing website offering to install a dangerous browser extension or a fake Flash Player Update. Once installed, it compromises user's account and starts spreading the link further.
The malicious virus works as a Trojan horse and belongs to the wide group of the Facebook virus. The virus has been active since 2013 and updated several times. The latest version emerged in August 2017 – criminals are distributing malicious link with a short phrase “[name of the recipient] Video :o” to lure victims to click on it.
The purpose of the virus is to hack victim’s Facebook account. In order to do that the virus attacks people via chat window: it pops up as a message from an individual who seems to be your friend and shows a link to some website.
If you click on this link, you will likely get redirected to a fake copy of Youtube or some other site which will suggest installing a browser add-on or software in order to view the content. If the victim agrees, the PC gets infected with malware, which additionally blocks security software in order to prevent its elimination.
What is more, it starts sending the same fake message to victim’s contacts via the same Facebook chat windows. Please, ignore all suspicious messages that come to your inbox. Even more, contact the sender and ask about the picture or video.
In 2016, French computer users were attacked by A Facebook Messenger Trojan named “Eko” that can spy on users and collect personally identifiable information. The same year English-speaking computer users suffered from the wave of messenger spam spreading a video virus. There were two examples of messages asking: “You are in this video? ” and “This is your video? .”
Last year a variant of Locky ransomware had been distributed with the help of Messenger too. Criminals send a message with a picture in SVG format. Once people clicked on it, they were redirected to a website that asked to install fake Chrome extension. Installation of this application leads to infiltration of a dangerous file-encrypting virus.
Another thing, which is usually done by Facebook Message virus, is the continuous distribution of itself via victim’s Facebook account. You may ask why scammers create such viruses. It has been revealed that the virus helps to steal personal information, such as logins, banking data, and passwords, and controls the machine.
Facebook Messenger virus 2017 continued the work of previous variants. Victims receive a fake YouTube link from their contacts. Once a person clicks on it, the virus redirects to a fake website that looks identical to Facebook. Here people are asked to enter their login details. As a result victim’s account is taken over by the hackers and the malicious message is forwarded to the whole victim’s contact list.
However, if you clicked on a malicious link, you should remove Facebook Message virus immediately and change your account’s password. If you cannot set a new password, you should report about hacked account Facebook via Support Centre. What is more, you should also change passwords of other accounts, especially if you use the same one.
For Facebook Message remover we suggest using Reimage. This anti-malware will find all malicious components on the system and eliminates its entirely.
Updated on August 25, 2017. A new wave of the malicious virus was spotted. This time, the scammers are distributing shortened bit.ly link with a short note “[name of the recipient] Video.” Once clicked, the link redirects the victim to a Google Doc page, which contains a picture that was automatically taken from victim's Facebook page.
The picture looks like a movie, so the victim will likely click on the play button to start it. Sadly, the virus then redirects the victim to websites that determine victim's browser type, geolocation, and other details.
Depending on victim's operating system, another redirect occurs. Kaspersky reports that Firefox users get redirected to a site offering fake Flash Player update, while Chrome users receive a prompt to install a malicious extension. People using Safari on Mac will receive a suggestion to install “the latest version of Media Player.”
After installing the malware, user's account could get compromised and start sending the virus link to all friends automatically. However, it is yet unclear how exactly the virus spreads. The attackers might be using clickjacking attacks or spying software to steal victims' login details.
Victims of the virus accelerate virus' distribution
The virus can easily infect your computer with the help of infected message that shows up on person-to-person chat. Typically, it offers to see a “shocking picture” or “exciting video.” Many users of this social network have been tricked by this scheme because this message looks like it was sent by one of the victim’s contacts.
Once a person clicks on the infected link, the virus enters the system. What is more, the same message is usually spread further to the victim’s contact list and tricking other users. Therefore, it’s a chain reaction that is nearly impossible to stop.
We want to remind that the only way to protect your PC, Facebook account and personal details are not to click suspicious links sent from your friends, colleagues or family members. If you suspect that the content of the message seems suspicious, you should ask your friend if this link or file is safe to open.
Keep in mind that cyber criminals tend to reply to victims. However, if you know the person, it won’t be hard to identify that you are talking with a different person. Otherwise, you should ask yourself if a person you haven’t spoken in years actually wants to share a video or picture with you. Most likely not.
Removing Facebook Message virus from the device
Nevertheless, virus on Facebook seems like spam; you should still check your computer’s state. Scanning computer with an anti-malware program is especially recommended if you have clicked on a suspicious link or downloaded unknown content.
In order to remove Facebook Message virus, we suggest scanning the computer with Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware. You can use other security software. However, you should not forget to update your preferred program.
Another important Facebook Messenger virus removal step is to change your Facebook password. If hackers took over your account, they might get credentials to email, bank, and other accounts. Thus, in order to protect your privacy, you should set a strong password. Keep in mind that good password:
- is at least 12 characters long;
- has numbers;
- has capital and lower-case letters;
- has symbols (if allowed);
- does not have your name, surname and other personal information included;
- is not a dictionary word.