funny, the extensions have different names...
I've posted a quick blog post about the #Nemucod downloader spreading via Facebook: https://bartblaze.blogspot.com/2016/11/nemucod-downloader-spreading-via.html …
IOCs: https://otx.alienvault.com/pulse/5832067bebd09c28cb5d8848/ …pic.twitter.com/33Cghk0vxy
-
-
-
How so?
- Show replies
New conversation -
-
-
Locky ransomware is being distributed via Facebook chat. Watch out. More info via
@bartblaze: https://bartblaze.blogspot.com/2016/11/nemucod-downloader-spreading-via.html …#nemucod#kerman#SVGpic.twitter.com/2eYdyjIIpU
-
A browser extension should not have access to your filesystem.
End of conversation
New conversation -
-
-
Interesting. On my W7 and W10, it's set to be opened by Internet Explorer as default.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
thanks, there isn't sadly much evidence yet :-/
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Be careful.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.