{"id":42981,"date":"2015-05-18T11:32:36","date_gmt":"2015-05-18T18:32:36","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=42981"},"modified":"2025-06-02T19:43:04","modified_gmt":"2025-06-03T02:43:04","slug":"malware-spreads-facebook-tag-scam","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/","title":{"rendered":"Malware Spreads Through Facebook Tag Scam"},"content":{"rendered":"<p>McAfee has recently observed a malware spreading through Facebook. This type of malware is not new, but it keeps evolving using new spreading mechanisms.<\/p>\n<h2>The Discovery<\/h2>\n<p>A few days ago, we came across a Facebook post with this subject:<\/p>\n<p style=\"padding-left: 30px;\">[Username] shared a link \u2013 with [Another username] and 19 others<\/p>\n<p>The link was disguised as a pornographic video to entice viewers. We have found that a number of people are infected by this malware.<\/p>\n<p style=\"text-align: center;\"><a href=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/2.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-42982\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/2.jpg\" alt=\"2\" width=\"674\" height=\"588\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2.jpg 674w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2-300x262.jpg 300w\" sizes=\"auto, (max-width: 674px) 100vw, 674px\" \/><\/a><\/p>\n<p>This malware uses the following script to get the user id and Facebook DTSG value:<\/p>\n<p style=\"text-align: center;\"><a href=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/17.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-42983\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/17.jpg\" alt=\"1\" width=\"975\" height=\"85\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/17.jpg 975w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/17-300x26.jpg 300w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/a><\/p>\n<p>The fb_dtsg is a request identifier that is unique to each Facebook request. It is also known as a cross-site request forgery (CSRF) token. (A CSRF is a type of malicious exploit of a website in which unauthorized commands are transmitted from a user that the website trusts. You can read <a href=\"http:\/\/en.wikipedia.org\/wiki\/Cross-site_request_forgery\" target=\"_blank\" rel=\"noopener\">more about CSRF here)<\/a>.<\/p>\n<p style=\"text-align: left;\">The following malware code randomly selects friends to tag:<\/p>\n<p style=\"text-align: left;\"><a href=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/34.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\" size-full wp-image-42984 aligncenter\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/34.jpg\" alt=\"3\" width=\"1382\" height=\"242\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/34.jpg 1382w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/34-300x53.jpg 300w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/34-1024x179.jpg 1024w\" sizes=\"auto, (max-width: 1382px) 100vw, 1382px\" \/><\/a><\/p>\n<p style=\"text-align: left;\"><a href=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/43.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\" size-full wp-image-42985 aligncenter\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/43.jpg\" alt=\"4\" width=\"1092\" height=\"364\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/43.jpg 1092w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/43-300x100.jpg 300w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/43-1024x341.jpg 1024w\" sizes=\"auto, (max-width: 1092px) 100vw, 1092px\" \/><\/a><\/p>\n<p>The following script selects a random porn image from its control server and displays it to the user:<\/p>\n<p><a href=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/52.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\" size-full wp-image-42986 aligncenter\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/52.jpg\" alt=\"5\" width=\"869\" height=\"244\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/52.jpg 869w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/52-300x84.jpg 300w\" sizes=\"auto, (max-width: 869px) 100vw, 869px\" \/><\/a><\/p>\n<p>This scam lures curious Facebook users to the compromised\u00a0website, which then attempts to trick them into installing malicious browser extensions and other malware to view the adult video. When users visit the link to view the video, the malware prompts them to download a fake Adobe Flash Player update, which in turn downloads the executable servant.exe on the victims&#8217; machines in the %appdata% folder and executes it.<\/p>\n<p style=\"text-align: center;\"><a href=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/63.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-42987\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/63.jpg\" alt=\"6\" width=\"963\" height=\"92\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/63.jpg 963w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/63-300x29.jpg 300w\" sizes=\"auto, (max-width: 963px) 100vw, 963px\" \/><\/a><\/p>\n<p>We can see the actual payload, downloaded from hxxp:\/\/exusers.com, in the network traffic shown below. Facebook\u00a0is already aware of this malicious domain\u00a0and is working out with their antimalware partners to detect this malware.<\/p>\n<p><a href=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/72.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-42988\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/72.jpg\" alt=\"7\" width=\"1175\" height=\"408\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/72.jpg 1175w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/72-300x104.jpg 300w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/72-1024x356.jpg 1024w\" sizes=\"auto, (max-width: 1175px) 100vw, 1175px\" \/><\/a><\/p>\n<p>The downloaded payload creates a run registry entry to execute itself every time Windows starts.<\/p>\n<p style=\"text-align: center;\"><a href=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/82.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-42989\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/82.jpg\" alt=\"8\" width=\"606\" height=\"210\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/82.jpg 606w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/82-300x104.jpg 300w\" sizes=\"auto, (max-width: 606px) 100vw, 606px\" \/><\/a><\/p>\n<p>The payload also\u00a0creates the following files on a victim\u2019s machine:<\/p>\n<ul>\n<li>c:\\documents and settings\\administrator\\application data\\microsoft\\protect\\S-1-5-21-117609710-1801674531-725345543-500\\preferred<\/li>\n<li>c:\\documents and settings\\administrator\\application data\\microsoft\\protect\\s-1-5-21-1844237615-2111687655-839522115-500\\4532158e-ef11-42f9-813c-ddbb4f02c848<\/li>\n<\/ul>\n<p>This behavior gives the malware author backdoor access to the system.<\/p>\n<p>After successful installation and delivery, the malware modifies victims&#8217; browsers to keep the malware updated and to block users from accessing certain security websites. The malicious browser extension blocks URLs that include any of the following keywords:<\/p>\n<p><a href=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/91.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\" size-full wp-image-42990 aligncenter\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/91.jpg\" alt=\"9\" width=\"998\" height=\"81\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/91.jpg 998w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/91-300x24.jpg 300w\" sizes=\"auto, (max-width: 998px) 100vw, 998px\" \/><\/a><\/p>\n<p>While browsing these, victims may see the following error message:<\/p>\n<p style=\"text-align: center;\"><a href=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/101.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-42991\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/101.jpg\" alt=\"10\" width=\"532\" height=\"476\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/101.jpg 532w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/101-300x268.jpg 300w\" sizes=\"auto, (max-width: 532px) 100vw, 532px\" \/><\/a><\/p>\n<p>This malware is different from other social media malware in some techniques. Previously this type of malware spread through victims&#8217; chat windows and infected victims&#8217; friends. Once victims&#8217; friends are infected, the malware could go one step further and infect the friends of the initial victims&#8217; friends. The following screen shows how the malware was propagated through chat messages:<\/p>\n<p style=\"text-align: center;\"><a href=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/112.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-42992\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/112.jpg\" alt=\"11\" width=\"244\" height=\"437\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/112.jpg 244w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/112-168x300.jpg 168w\" sizes=\"auto, (max-width: 244px) 100vw, 244px\" \/><\/a><\/p>\n<p>With this new technique, the malware gains more visibility with potential victims as it tags 20 friends of each victim in the malicious post instead of sending personal chat requests. In this case, the tag may be seen by friends of the victim&#8217;s friends as well, which leads to a larger number of potential victims. Thus the malware propagates more quickly.<\/p>\n<p>In addition to keeping antimalware protection up to date, users should practice safe browsing techniques, such as avoiding unfamiliar links that redirect outside of Facebook, even if those links are shared by a trusted friend.<\/p>\n<p>McAfee detects this malware as BackDoor-FBUS starting with DAT Version 7781.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>McAfee has recently observed a malware spreading through Facebook. This type of malware is not new, but it keeps evolving&#8230;<\/p>\n","protected":false},"author":674,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[442],"tags":[1814,100,180,321],"coauthors":[3973],"class_list":["post-42981","post","type-post","status-publish","format-standard","hentry","category-mcafee-labs","tag-computer-security","tag-facebook","tag-malware","tag-social-networking"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Malware Spreads Through Facebook Tag Scam | McAfee Blog<\/title>\n<meta name=\"description\" content=\"McAfee has recently observed a malware spreading through Facebook. This type of malware is not new, but it keeps evolving using new spreading mechanisms.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Malware Spreads Through Facebook Tag Scam | McAfee Blog\" \/>\n<meta property=\"og:description\" content=\"McAfee has recently observed a malware spreading through Facebook. This type of malware is not new, but it keeps evolving using new spreading mechanisms.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/\" \/>\n<meta property=\"og:site_name\" content=\"McAfee Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/McAfee\/\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/McAfee\/\" \/>\n<meta property=\"article:published_time\" content=\"2015-05-18T18:32:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-03T02:43:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"674\" \/>\n\t<meta property=\"og:image:height\" content=\"588\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"McAfee\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@McAfee\" \/>\n<meta name=\"twitter:site\" content=\"@McAfee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"McAfee\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/\"},\"author\":{\"name\":\"McAfee\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/47851fdb92fad9456152405839c92efa\"},\"headline\":\"Malware Spreads Through Facebook Tag Scam\",\"datePublished\":\"2015-05-18T18:32:36+00:00\",\"dateModified\":\"2025-06-03T02:43:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/\"},\"wordCount\":572,\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/2.jpg\",\"keywords\":[\"computer security\",\"facebook\",\"malware\",\"social networking\"],\"articleSection\":[\"McAfee Labs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/\",\"name\":\"Malware Spreads Through Facebook Tag Scam | McAfee Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/2.jpg\",\"datePublished\":\"2015-05-18T18:32:36+00:00\",\"dateModified\":\"2025-06-03T02:43:04+00:00\",\"description\":\"McAfee has recently observed a malware spreading through Facebook. This type of malware is not new, but it keeps evolving using new spreading mechanisms.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#primaryimage\",\"url\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/2.jpg\",\"contentUrl\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/2.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Other Blogs\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"McAfee Labs\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Malware Spreads Through Facebook Tag Scam\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"name\":\"McAfee Blog\",\"description\":\"Internet Security News\",\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\",\"name\":\"McAfee\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"width\":1286,\"height\":336,\"caption\":\"McAfee\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/McAfee\/\",\"https:\/\/x.com\/McAfee\",\"https:\/\/www.linkedin.com\/company\/mcafee\/\",\"https:\/\/www.youtube.com\/McAfee\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/47851fdb92fad9456152405839c92efa\",\"name\":\"McAfee\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/1ffadfeeda1f4f9e7891a81f27a9ecf4\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2020\/08\/Original-Logo-96x96.png\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2020\/08\/Original-Logo-96x96.png\",\"caption\":\"McAfee\"},\"description\":\"We're here to make life online safe and enjoyable for everyone.\",\"sameAs\":[\"https:\/\/www.facebook.com\/McAfee\/\",\"https:\/\/www.linkedin.com\/company\/mcafee\/\",\"https:\/\/x.com\/McAfee\"],\"url\":\"https:\/\/www.mcafee.com\/blogs\/author\/mcafee\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Malware Spreads Through Facebook Tag Scam | McAfee Blog","description":"McAfee has recently observed a malware spreading through Facebook. This type of malware is not new, but it keeps evolving using new spreading mechanisms.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Malware Spreads Through Facebook Tag Scam | McAfee Blog","og_description":"McAfee has recently observed a malware spreading through Facebook. This type of malware is not new, but it keeps evolving using new spreading mechanisms.","og_url":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/","og_site_name":"McAfee Blog","article_publisher":"https:\/\/www.facebook.com\/McAfee\/","article_author":"https:\/\/www.facebook.com\/McAfee\/","article_published_time":"2015-05-18T18:32:36+00:00","article_modified_time":"2025-06-03T02:43:04+00:00","og_image":[{"width":674,"height":588,"url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2.jpg","type":"image\/jpeg"}],"author":"McAfee","twitter_card":"summary_large_image","twitter_creator":"@McAfee","twitter_site":"@McAfee","twitter_misc":{"Written by":"McAfee","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#article","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/"},"author":{"name":"McAfee","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/47851fdb92fad9456152405839c92efa"},"headline":"Malware Spreads Through Facebook Tag Scam","datePublished":"2015-05-18T18:32:36+00:00","dateModified":"2025-06-03T02:43:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/"},"wordCount":572,"publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#primaryimage"},"thumbnailUrl":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/2.jpg","keywords":["computer security","facebook","malware","social networking"],"articleSection":["McAfee Labs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/","url":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/","name":"Malware Spreads Through Facebook Tag Scam | McAfee Blog","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#primaryimage"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#primaryimage"},"thumbnailUrl":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/2.jpg","datePublished":"2015-05-18T18:32:36+00:00","dateModified":"2025-06-03T02:43:04+00:00","description":"McAfee has recently observed a malware spreading through Facebook. This type of malware is not new, but it keeps evolving using new spreading mechanisms.","breadcrumb":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#primaryimage","url":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/2.jpg","contentUrl":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/2.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/malware-spreads-facebook-tag-scam\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.mcafee.com\/blogs\/"},{"@type":"ListItem","position":2,"name":"Other Blogs","item":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/"},{"@type":"ListItem","position":3,"name":"McAfee Labs","item":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/"},{"@type":"ListItem","position":4,"name":"Malware Spreads Through Facebook Tag Scam"}]},{"@type":"WebSite","@id":"https:\/\/www.mcafee.com\/blogs\/#website","url":"https:\/\/www.mcafee.com\/blogs\/","name":"McAfee Blog","description":"Internet Security News","publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.mcafee.com\/blogs\/#organization","name":"McAfee","url":"https:\/\/www.mcafee.com\/blogs\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","width":1286,"height":336,"caption":"McAfee"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/McAfee\/","https:\/\/x.com\/McAfee","https:\/\/www.linkedin.com\/company\/mcafee\/","https:\/\/www.youtube.com\/McAfee"]},{"@type":"Person","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/47851fdb92fad9456152405839c92efa","name":"McAfee","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/1ffadfeeda1f4f9e7891a81f27a9ecf4","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2020\/08\/Original-Logo-96x96.png","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2020\/08\/Original-Logo-96x96.png","caption":"McAfee"},"description":"We're here to make life online safe and enjoyable for everyone.","sameAs":["https:\/\/www.facebook.com\/McAfee\/","https:\/\/www.linkedin.com\/company\/mcafee\/","https:\/\/x.com\/McAfee"],"url":"https:\/\/www.mcafee.com\/blogs\/author\/mcafee\/"}]}},"_links":{"self":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/42981","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/users\/674"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/comments?post=42981"}],"version-history":[{"count":2,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/42981\/revisions"}],"predecessor-version":[{"id":214942,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/42981\/revisions\/214942"}],"wp:attachment":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/media?parent=42981"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/categories?post=42981"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/tags?post=42981"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/coauthors?post=42981"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}