MrTonyScam: How criminals are using hacked Facebook accounts to dupe thousands

Facebook allows users to send messages. According to a report by Guardio Labs (spotted by Bleeping Computer), researchers have warned that hackers are now using a widely spread network of fake and hacked Facebook accounts to send out phishing messages. With these messages, cybercriminals are trying to trick people into installing password-stealing malware.

How hackers are targeting users

These messages contain a RAR/ZIP archive which includes a downloader for an evasive Python-based stealer. This file can steal cookies and passwords stored in the victim’s browser.