{"id":330647,"date":"2018-05-02T18:00:24","date_gmt":"2018-05-02T18:00:24","guid":{"rendered":"https:\/\/uniquehot.com\/?p=330647"},"modified":"2018-05-02T16:48:36","modified_gmt":"2018-05-02T16:48:36","slug":"cryptocurrency-targeting-malware-spreads-via-facebook-messenger","status":"publish","type":"post","link":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/","title":{"rendered":"Cryptocurrency-Targeting Malware Spreads via Facebook Messenger"},"content":{"rendered":"

A malicious Chrome extension discovered by Kaspersky Labs in August 2017 which targets cryptocurrency trading platforms has resurfaced with a spike in April 2018. The malware reportedly made attempts in a number of countries including Japan and South Korea.<\/p>\n

Malicious Chrome Extension Spreads Via Facebook Messenger to Target Cryptocurrency Trading Platforms<\/h2>\n

In August 2017, Kaspersky Labs researcher David Jacoby found an advanced form of malware which used Facebook Messenger to infect victims’ systems. It did this by displaying a fake error message in a redirected website that tricked users to download a malicious Google Chrome extension from the Google Web Store. TrendLabs has found the same malware again in April 2018 after a spike in reports in Germany, Tunisia, Japan, Taiwan, South Korea, and Spain.<\/p>\n

Named FacexWorm by the TrendLabs team<\/a>, the malicious extension lists and sends socially engineered links to the friends of an affected Facebook account and is capable of stealing accounts and credentials of its websites of interest, mostly cryptocurrency trading platforms. FacexWorm is a clone of a normal Chrome extension but injected with shortcode containing its main routine. It redirects victims to cryptocurrency scams with malicious mining codes<\/a> on the webpage and hijacks transactions by replacing the recipient address with the attacker\u2019s\u00a0in trading platforms and web wallets.<\/p>\n

FacexWorm propagates through Facebook Messenger as it redirects to a fake YouTube page<\/a> that asks users to install\u00a0a codec extension in order to play the video, which then requests privileged access. The granted permission leads to a stream of downloads of additional malicious codes from its command-and-control (C&C) server and Facebook in order to further spread the malware through the account\u2019s friend list. If users are using browsers other than Chrome\u2019s desktop version, the malware link diverts to a random advertisement.<\/p>\n

The malware steals the victim’s account credentials for Google, MyMonero, and Coinhive, and redirects the user to a scam webpage if the browser accesses one of the 52 cryptocurrency trading platforms it targets or if searches for cryptocurrency-related keywords. The scam asks the user to send 0.5 \u2013 10 ether (ETH) to the attacker\u2019s wallet address for verification purposes and promises to send back 5 \u2013 100 ETH.<\/p>\n

FacexWorm also attacks the user’s computer for malicious web cryptocurrency mining, as it utilizes 20 percent of CPU power\u00a0for each thread and opens four threads to mining on web pages. Moreover, the victim is vulnerable to cryptocurrency transaction hijacking as the malware locates the address keyed in by the victim and replaces it with another specified by the attacker. FacexWorm also earns money through cryptocurrency-related referral programs and it has redirected users to a number of websites, including\u00a0Binance, DigitalOcean, FreeBitco.in, FreeDoge.co.in, and HashFlare.<\/p>\n

Image from Shutterstock.<\/pre>\n","protected":false},"excerpt":{"rendered":"
A malicious Chrome extension discovered by Kaspersky Labs in August 2017 which targets cryptocurrency trading platforms has resurfaced with a spike in April 2018. The malware reportedly made attempts in a number of countries including Japan and South Korea. Malicious Chrome Extension Spreads Via Facebook Messenger to Target Cryptocurrency Trading Platforms In August 2017, Kaspersky Labs researcher David Jacoby found an advanced form of malware which used Facebook Messenger to infect victims’ systems. It did this by displaying a fake error message in a redirected website that tricked users to download a malicious Google Chrome extension from the Google Web Store. TrendLabs has found the same malware again in April 2018 after a spike in reports in Germany, Tunisia, Japan, Taiwan, South Korea, and Spain. Named FacexWorm by the TrendLabs team, the malicious extension lists and sends socially engineered links to the friends of an affected Facebook account and is capable of stealing accounts and credentials of its websites of interest, mostly cryptocurrency trading platforms. FacexWorm is a clone of a normal Chrome extension but injected with shortcode containing its main routine. It redirects victims to cryptocurrency scams with malicious mining codes on the webpage and hijacks transactions by replacing the recipient address with the attacker\u2019s\u00a0in trading platforms and web wallets. FacexWorm propagates through Facebook Messenger as it redirects to a fake YouTube page that asks users to install\u00a0a codec extension in order to play the video, which then requests privileged access. The granted permission leads to a stream of downloads of additional malicious codes from its command-and-control (C&C) server and Facebook in order to further spread the malware through the account\u2019s friend list. If users are using browsers other than Chrome\u2019s desktop version, the malware link diverts to a random advertisement. The malware steals the victim’s account credentials for Google, MyMonero, and Coinhive, and redirects the user to a scam webpage if the browser accesses one of the 52 cryptocurrency trading platforms it targets or if searches for cryptocurrency-related keywords. The scam asks the user to send 0.5 \u2013 10 ether (ETH) to the attacker\u2019s wallet address for verification purposes and promises to send back 5 \u2013 100 ETH. FacexWorm also attacks the user’s computer for malicious web cryptocurrency mining, as it utilizes 20 percent of CPU power\u00a0for each thread and opens four threads to mining on web pages. Moreover, the victim is vulnerable to cryptocurrency transaction hijacking as the malware locates the address keyed in by the victim and replaces it with another specified by the attacker. FacexWorm also earns money through cryptocurrency-related referral programs and it has redirected users to a number of websites, including\u00a0Binance, DigitalOcean, FreeBitco.in, FreeDoge.co.in, and HashFlare. Image from Shutterstock.<\/p>\n","protected":false},"author":486,"featured_media":330699,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[12436],"tags":[7995,1332,7770,14148,2109,2276,2863,3776,14149],"class_list":["post-330647","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-and-tech","tag-chrome","tag-chrome-extension","tag-facebook-messenger","tag-facexworm","tag-fraud","tag-hack","tag-malware","tag-scam","tag-trendlabs"],"acf":[],"yoast_head":"\nCryptocurrency-Targeting Malware Spreads via Facebook Messenger<\/title>\n<meta name=\"description\" content=\"A malicious Chrome extension discovered by Kaspersky Labs in August 2017 which targets cryptocurrency trading platforms has resurfaced with a spike in April 2018. The malware reportedly made attempts in a number of countries including Japan and South Korea.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cryptocurrency-Targeting Malware Spreads Via Facebook Messenger\" \/>\n<meta property=\"og:description\" content=\"A malicious Chrome extension discovered by Kaspersky Labs in August 2017 which targets cryptocurrency trading platforms has resurfaced with a spike in April 2018. The malware reportedly made attempts in a number of countries including Japan and South Korea.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/\" \/>\n<meta property=\"og:site_name\" content=\"NewsBTC\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/newsbtc\" \/>\n<meta property=\"article:published_time\" content=\"2018-05-02T18:00:24+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-05-02T16:48:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"667\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ricardo Esteves\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Cryptocurrency-Targeting Malware Spreads Via Facebook Messenger\" \/>\n<meta name=\"twitter:description\" content=\"A malicious Chrome extension discovered by Kaspersky Labs in August 2017 which targets cryptocurrency trading platforms has resurfaced with a spike in April 2018. The malware reportedly made attempts in a number of countries including Japan and South Korea.\" \/>\n<meta name=\"twitter:creator\" content=\"@newsbtc\" \/>\n<meta name=\"twitter:site\" content=\"@newsbtc\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ricardo Esteves\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/\"},\"author\":{\"name\":\"Ricardo Esteves\",\"@id\":\"https:\/\/uniquehot.com\/#\/schema\/person\/f9e95f78e742f3f5c84f5472749c46dd\"},\"headline\":\"Cryptocurrency-Targeting Malware Spreads via Facebook Messenger\",\"datePublished\":\"2018-05-02T18:00:24+00:00\",\"dateModified\":\"2018-05-02T16:48:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/\"},\"wordCount\":452,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/uniquehot.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg?fit=1000%2C667\",\"keywords\":[\"Chrome\",\"Chrome extension\",\"Facebook Messenger\",\"facexworm\",\"fraud\",\"hack\",\"malware\",\"scam\",\"trendlabs\"],\"articleSection\":[\"AI and Tech\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#respond\"]}],\"copyrightYear\":\"2018\",\"copyrightHolder\":{\"@id\":\"https:\/\/uniquehot.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/\",\"url\":\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/\",\"name\":\"Cryptocurrency-Targeting Malware Spreads via Facebook Messenger\",\"isPartOf\":{\"@id\":\"https:\/\/uniquehot.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg?fit=1000%2C667\",\"datePublished\":\"2018-05-02T18:00:24+00:00\",\"dateModified\":\"2018-05-02T16:48:36+00:00\",\"description\":\"A malicious Chrome extension discovered by Kaspersky Labs in August 2017 which targets cryptocurrency trading platforms has resurfaced with a spike in April 2018. The malware reportedly made attempts in a number of countries including Japan and South Korea.\",\"breadcrumb\":{\"@id\":\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#primaryimage\",\"url\":\"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg?fit=1000%2C667\",\"contentUrl\":\"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg?fit=1000%2C667\",\"width\":1000,\"height\":667,\"caption\":\"Malware\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/uniquehot.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cryptocurrency-Targeting Malware Spreads via Facebook Messenger\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/uniquehot.com\/#website\",\"url\":\"https:\/\/uniquehot.com\/\",\"name\":\"NewsBTC\",\"description\":\"Bitcoin & Cryptocurrency News Today\",\"publisher\":{\"@id\":\"https:\/\/uniquehot.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/uniquehot.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/uniquehot.com\/#organization\",\"name\":\"NewsBTC\",\"url\":\"https:\/\/uniquehot.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/uniquehot.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/uniquehot.com\/wp-content\/uploads\/2020\/06\/logo-min.png?fit=157%2C46\",\"contentUrl\":\"https:\/\/uniquehot.com\/wp-content\/uploads\/2020\/06\/logo-min.png?fit=157%2C46\",\"width\":157,\"height\":46,\"caption\":\"NewsBTC\"},\"image\":{\"@id\":\"https:\/\/uniquehot.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/newsbtc\",\"https:\/\/x.com\/newsbtc\",\"https:\/\/www.youtube.com\/channel\/UC9v9erBEru5y4c3FA0wehEw\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/uniquehot.com\/#\/schema\/person\/f9e95f78e742f3f5c84f5472749c46dd\",\"name\":\"Ricardo Esteves\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/uniquehot.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ea6a352368ecfb1740340321f482aed3?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ea6a352368ecfb1740340321f482aed3?s=96&d=mm&r=g\",\"caption\":\"Ricardo Esteves\"},\"url\":\"https:\/\/uniquehot.com\/author\/ricardoesteves\/\"}]}<\/script>\n","yoast_head_json":{"title":"Cryptocurrency-Targeting Malware Spreads via Facebook Messenger","description":"A malicious Chrome extension discovered by Kaspersky Labs in August 2017 which targets cryptocurrency trading platforms has resurfaced with a spike in April 2018. The malware reportedly made attempts in a number of countries including Japan and South Korea.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/","og_locale":"en_US","og_type":"article","og_title":"Cryptocurrency-Targeting Malware Spreads Via Facebook Messenger","og_description":"A malicious Chrome extension discovered by Kaspersky Labs in August 2017 which targets cryptocurrency trading platforms has resurfaced with a spike in April 2018. The malware reportedly made attempts in a number of countries including Japan and South Korea.","og_url":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/","og_site_name":"NewsBTC","article_publisher":"https:\/\/www.facebook.com\/newsbtc","article_published_time":"2018-05-02T18:00:24+00:00","article_modified_time":"2018-05-02T16:48:36+00:00","og_image":[{"width":1000,"height":667,"url":"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg","type":"image\/jpeg"}],"author":"Ricardo Esteves","twitter_card":"summary_large_image","twitter_title":"Cryptocurrency-Targeting Malware Spreads Via Facebook Messenger","twitter_description":"A malicious Chrome extension discovered by Kaspersky Labs in August 2017 which targets cryptocurrency trading platforms has resurfaced with a spike in April 2018. The malware reportedly made attempts in a number of countries including Japan and South Korea.","twitter_creator":"@newsbtc","twitter_site":"@newsbtc","twitter_misc":{"Written by":"Ricardo Esteves","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#article","isPartOf":{"@id":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/"},"author":{"name":"Ricardo Esteves","@id":"https:\/\/uniquehot.com\/#\/schema\/person\/f9e95f78e742f3f5c84f5472749c46dd"},"headline":"Cryptocurrency-Targeting Malware Spreads via Facebook Messenger","datePublished":"2018-05-02T18:00:24+00:00","dateModified":"2018-05-02T16:48:36+00:00","mainEntityOfPage":{"@id":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/"},"wordCount":452,"commentCount":0,"publisher":{"@id":"https:\/\/uniquehot.com\/#organization"},"image":{"@id":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#primaryimage"},"thumbnailUrl":"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg?fit=1000%2C667","keywords":["Chrome","Chrome extension","Facebook Messenger","facexworm","fraud","hack","malware","scam","trendlabs"],"articleSection":["AI and Tech"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#respond"]}],"copyrightYear":"2018","copyrightHolder":{"@id":"https:\/\/uniquehot.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/","url":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/","name":"Cryptocurrency-Targeting Malware Spreads via Facebook Messenger","isPartOf":{"@id":"https:\/\/uniquehot.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#primaryimage"},"image":{"@id":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#primaryimage"},"thumbnailUrl":"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg?fit=1000%2C667","datePublished":"2018-05-02T18:00:24+00:00","dateModified":"2018-05-02T16:48:36+00:00","description":"A malicious Chrome extension discovered by Kaspersky Labs in August 2017 which targets cryptocurrency trading platforms has resurfaced with a spike in April 2018. The malware reportedly made attempts in a number of countries including Japan and South Korea.","breadcrumb":{"@id":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#primaryimage","url":"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg?fit=1000%2C667","contentUrl":"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg?fit=1000%2C667","width":1000,"height":667,"caption":"Malware"},{"@type":"BreadcrumbList","@id":"https:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/uniquehot.com\/"},{"@type":"ListItem","position":2,"name":"Cryptocurrency-Targeting Malware Spreads via Facebook Messenger"}]},{"@type":"WebSite","@id":"https:\/\/uniquehot.com\/#website","url":"https:\/\/uniquehot.com\/","name":"NewsBTC","description":"Bitcoin & Cryptocurrency News Today","publisher":{"@id":"https:\/\/uniquehot.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/uniquehot.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/uniquehot.com\/#organization","name":"NewsBTC","url":"https:\/\/uniquehot.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/uniquehot.com\/#\/schema\/logo\/image\/","url":"https:\/\/uniquehot.com\/wp-content\/uploads\/2020\/06\/logo-min.png?fit=157%2C46","contentUrl":"https:\/\/uniquehot.com\/wp-content\/uploads\/2020\/06\/logo-min.png?fit=157%2C46","width":157,"height":46,"caption":"NewsBTC"},"image":{"@id":"https:\/\/uniquehot.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/newsbtc","https:\/\/x.com\/newsbtc","https:\/\/www.youtube.com\/channel\/UC9v9erBEru5y4c3FA0wehEw"]},{"@type":"Person","@id":"https:\/\/uniquehot.com\/#\/schema\/person\/f9e95f78e742f3f5c84f5472749c46dd","name":"Ricardo Esteves","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/uniquehot.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ea6a352368ecfb1740340321f482aed3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ea6a352368ecfb1740340321f482aed3?s=96&d=mm&r=g","caption":"Ricardo Esteves"},"url":"https:\/\/uniquehot.com\/author\/ricardoesteves\/"}]}},"parsely":{"version":"1.1.0","meta":{"@context":"https:\/\/schema.org","@type":"NewsArticle","headline":"Cryptocurrency-Targeting Malware Spreads via Facebook Messenger","url":"http:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/","mainEntityOfPage":{"@type":"WebPage","@id":"http:\/\/uniquehot.com\/news\/ai-and-tech\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\/"},"thumbnailUrl":"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg?resize=200%2C200","image":{"@type":"ImageObject","url":"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg?fit=1000%2C667"},"articleSection":"AI and Tech","author":[{"@type":"Person","name":"Ricardo Esteves"}],"creator":["Ricardo Esteves"],"publisher":{"@type":"Organization","name":"NewsBTC","logo":"https:\/\/uniquehot.com\/wp-content\/uploads\/2020\/06\/cropped-cropped-cropped-favicon.png?w=32"},"keywords":["chrome","chrome extension","facebook messenger","facexworm","fraud","hack","malware","scam","trendlabs"],"dateCreated":"2018-05-02T18:00:24Z","datePublished":"2018-05-02T18:00:24Z","dateModified":"2018-05-02T18:00:24Z"},"rendered":"<script type=\"application\/ld+json\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"NewsArticle\",\"headline\":\"Cryptocurrency-Targeting Malware Spreads via Facebook Messenger\",\"url\":\"http:\\\/\\\/uniquehot.com\\\/news\\\/ai-and-tech\\\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\\\/\",\"mainEntityOfPage\":{\"@type\":\"WebPage\",\"@id\":\"http:\\\/\\\/uniquehot.com\\\/news\\\/ai-and-tech\\\/cryptocurrency-targeting-malware-spreads-via-facebook-messenger\\\/\"},\"thumbnailUrl\":\"https:\\\/\\\/uniquehot.com\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/Facebook-Messager-Crypto-Malware.jpg?resize=200%2C200\",\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/uniquehot.com\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/Facebook-Messager-Crypto-Malware.jpg?fit=1000%2C667\"},\"articleSection\":\"AI and Tech\",\"author\":[{\"@type\":\"Person\",\"name\":\"Ricardo Esteves\"}],\"creator\":[\"Ricardo Esteves\"],\"publisher\":{\"@type\":\"Organization\",\"name\":\"NewsBTC\",\"logo\":\"https:\\\/\\\/uniquehot.com\\\/wp-content\\\/uploads\\\/2020\\\/06\\\/cropped-cropped-cropped-favicon.png?w=32\"},\"keywords\":[\"chrome\",\"chrome extension\",\"facebook messenger\",\"facexworm\",\"fraud\",\"hack\",\"malware\",\"scam\",\"trendlabs\"],\"dateCreated\":\"2018-05-02T18:00:24Z\",\"datePublished\":\"2018-05-02T18:00:24Z\",\"dateModified\":\"2018-05-02T18:00:24Z\"}<\/script>","tracker_url":"https:\/\/cdn.parsely.com\/keys\/uniquehot.com\/p.js"},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/uniquehot.com\/wp-content\/uploads\/2018\/05\/Facebook-Messager-Crypto-Malware.jpg?fit=1000%2C667","amp_enabled":true,"_links":{"self":[{"href":"https:\/\/uniquehot.com\/wp-json\/wp\/v2\/posts\/330647"}],"collection":[{"href":"https:\/\/uniquehot.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/uniquehot.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/uniquehot.com\/wp-json\/wp\/v2\/users\/486"}],"replies":[{"embeddable":true,"href":"https:\/\/uniquehot.com\/wp-json\/wp\/v2\/comments?post=330647"}],"version-history":[{"count":0,"href":"https:\/\/uniquehot.com\/wp-json\/wp\/v2\/posts\/330647\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/uniquehot.com\/wp-json\/wp\/v2\/media\/330699"}],"wp:attachment":[{"href":"https:\/\/uniquehot.com\/wp-json\/wp\/v2\/media?parent=330647"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/uniquehot.com\/wp-json\/wp\/v2\/categories?post=330647"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/uniquehot.com\/wp-json\/wp\/v2\/tags?post=330647"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}