Malicious Pinterest browser plugin stealing passwords and spreading spam

Social networking sites are unfortunately now major interest to malicious cyber criminals, spreading malware and building botnet army to steal money direct from your keyboards.

Janne Ahlberg, a security professional from Finland found and analysed an interesting piece of malicious code, offered as browser plugin, and infecting system to steal passwords from user's browser and also modifies the original Pinterest Pins links to spam with malicious links automatically.

You may also like:

• Cellphone Hacking : How to Spy on Cell Phones
• Istealer Tutorial : Email Password stealer to hack email account
• Hack Facebook, Hotmail, Gmail Passowrd using Winspy Keylogger
• Remote Password Hacking Software - Sniperspy keylogger
• How To Hack Password Through Mobile

A diet spam on Pinterest redirecting users to a malicious site with domain name pinteresf.org, plausible-looking domain name, like original Pinterest with similar appearance. On page load, it triggers a pop up message to all incoming visitors, offering to download “Pinterest Tool” as shown in screenshots “To continue, install our Pinterest Tool and enjoy more features of our site.”

Janne's investigation claims that, this fake site offering a fake malware loaded browser plugin, harvesting passwords from users system.

F-Secure Antivirus firm also detected it as “Trojan.PWS.ZAQ“. Similar malicious Pinterest plugin was first time spotted in 2012.

Another researcher, Chrisjwilson has also analyzed the plugin and found that malware is modifying the original Pinterest Pins made my user and inserting malicious links to do spam. This malware gets the website specific payload from a remote server. Currently it seems to be limited to Pinterest, but estimated thousands of users are already infected.

If you enjoyed this post and wish to be informed whenever a new post is published, then make sure you subscribe to my regular Email Updates. Subscribe Now!

Do you need to know what your child is doing on the computer? Do you want to know what your loved ones or spouse or kids are doing on the computer? Do you need to monitor what your employees are doing during work hours? Are they working or playing?

Winspy Keylogger is intended to help you in these kind of situations. It can show you exactly what is being done on the computer at any time.

Click Here To Download Winspy Keylogger