Microsoft warns of Facebook-hijacking extensions

According to a warning from Microsoft's Malware Protection Center, Malicious browser extensions are trying to hijack Facebook profiles.

Dubbed JS/Febipos.A by Microsoft, it was first discovered in Brazil and targets Chrome and Mozilla Firefox. A custom trojan dropper seems to be the source.

The trojan checks to see if the user is logged into Facebook and then retrieves a configuration file from the site. The extension is able to like pages, share pages, post, join groups, invite friends to groups, chat to friends or comment on posts. The researchers have seen the extension post messages about teen suicide with a video link which sends users to malicious sistes. It also sends out a variety of messages via chat, posts and comments.

Microsoft recommends that users review their installed extensions. The extensions are detected by Microsoft's security software, providing the latest definitions are installed.