A new variant of the Dorkbot malware was discovered spreading through Facebook’s internal chat service. Researchers discovered links to the malware circulating among Facebook users in the United States, India, Germany, Portugal, Turkey, Turkey and Romania. The infection was unusual because the criminals exploited a flaw in the file-sharing site MediaFire to spread the malware. The malware is spread through a botnet that uses the Internet Relay Chat (IRC) protocol to spread. The application would monitor a victim’s browsing activity and harvest passwords from the browser.”]
Source: https://www.csoonline.com/article/2133458/facebook-attacked-with-credential-harvesting-malware.html