'Chrome_Video_installer.scr' is being shared, along with a screen shot of a video on both Facebook and Google Plus, by way of a shortened URL in order to disguise the obvious fake. The user is presented a URL claiming to be a link to a video. Clicking on the link leads to the .scr file being downloaded, automatically.
TROJ_KILIM.EFLD is the actual program that will be executed should the user attempt to execute the downloaded program. Variants of KILIM have been used to spam Facebook messages system and cause infection.
Users are then called on to download another file, which hides another trojan file.
0 comments:
Post a Comment