Hunting Scammer Fraud: Meta Business Managers Abused by Google Ads to Steal Meta Accounts
Howdy guys! The speed at which you launch and run Meta accounts is close to the light of speed because no matter what you know, you have to catch a few trust accounts that would well-cost-run and increase their number so as not to lose income. You will unlikely have time to complain about the business manager accounts (BMA) leak to US cybersecurity services. However, Morphisec analysts are now investigating one of the schemes for stealing advertisers’ BMA on Meta, and it will be helpful for you to read how to secure your accounts. The company revealed a scheme to steal accounts; let’s check it.
The most awful crime in this scheme is the cynic method of stealing Meta accounts. In addition to this scheme, there are other scams, such as travel, social media, job hunting, and holiday shopping, which also target victims through different methods. Scammers use Google Ads and fake Meta profiles that disguise a link to download malicious files as ads for games, adult content, and cracked software.
Morphisec’s report indicates that scammers collect sensitive information, including login data, cookies, data about ads that run from the Meta account, and information about a person. BMA.
The scheme is relatively primitive if you look closely, but unfortunately, due to Windows vulnerabilities, it’s still working. Fraudsters lure you to click on the link using Google Ads (it’s strange that your Google account still misses this) or Meta. The link supposedly contains a “game, movie or cracked program” Zip file, but the downloaded file executes PHP scripts that steal information.
Today's critical vulnerability problem is the Windows OS and its background loader with access to the DLL library.
What a DLL is described in “human” language in a Microsoft blog: “On Windows operating systems, the Comdlg32 DLL performs standard functions related to dialog boxes. Each program can use the functions in this DLL to implement the Open dialog box. This promotes code reuse and efficient memory usage.
With the help of a DLL, a computer program can be divided into individual components. For example, an accounting program may be sold in modules. Each module can be loaded into the main program at run time if it is installed. Since the modules are separate, the program loading time is faster.”
Infostealer malware usually consists of two parts. First, a legitimate application is launched when a user clicks on a malicious link. The application is legal but contains a malicious dynamic link library, which the attackers use in connection with the background download. The application, in turn, launches an installer that unpacks the PHP application with a set of data-stealing queries.
You can protect your account by following strict precautions:
Do not download anything from unknown links;
Disable the background uploads option for Windows;
Change account passwords periodically;
Do not bind personal credit cards to working BMA;
Just use MacOS and choose an affiliate program for yourself, where the draws of Apple gadgets take place.
It is worth noting that the investigation has been ongoing since 2021, and the cybersecurity group of companies is barely keeping up with the pace of the scammers. The technical engineers of Vulcan Cyber even suggested drastically banning Win background uploads. Still, the phone company rejected this proposal because the speed of the already slow operating system would suffer. While the investigation is ongoing and there is no ready-made solution, you need to take care of the security of your data yourself. So be careful with your accounts, and do not be lazy about double-checking your data once again.
In today’s digital age, fraud, and scams have become increasingly prevalent, with scammers employing sophisticated tactics to deceive victims and steal their sensitive personal information. Understanding the difference between fraud and scams is crucial in protecting yourself from financial loss and identity theft. This article will explore the distinction between fraud and scams, typical examples, and provide tips and resources on safeguarding against them. By staying informed and vigilant, you can better protect your personal information and avoid falling victim to these malicious schemes.
The Rise of Identity Theft
Identity theft is a type of fraud that involves the unauthorized use of someone’s personal information, such as their social security number, bank account details, or credit card information. According to research by the Federal Trade Commission (FTC), identity theft has become one of the fastest-growing crimes in the United States, with millions of Americans falling victim each year. Scammers use various methods to obtain personal information, including phishing scams, online hacking, and even physical theft. The consequences of identity theft can be devastating, leading to financial loss, damaged credit, and a long, arduous process to restore one’s identity.
Scammers are crafty and use a variety of tactics to deceive victims and obtain their personal information. They may create fake websites, emails, contact us, or social media profiles that appear legitimate but are designed to trick victims into providing sensitive information. High-pressure sales tactics are another standard method, where scammers promise unrealistic returns or benefits in exchange for money or personal information. Additionally, scammers often use wire transfer services or other unsecured payment methods to receive money from victims, making it difficult to trace and recover the funds. Knowing these tactics can help you stay ahead and protect your personal information.
The Goal: Financial Gain
The ultimate goal of scammers is to obtain financial gain, whether through stealing money directly or using stolen personal information to commit identity theft. Scammers may use stolen credit card information to make unauthorized purchases or use stolen bank account information to withdraw funds. They may also sell stolen personal information on the dark web, which can be used to commit further crimes. The financial impact on victims can be severe, with potential losses reaching thousands of dollars. Understanding the motives behind these other types of scams can help you recognize and avoid them.
Combating Scams with Law Enforcement Partners
Combating scams requires collaboration between law enforcement partners, government agencies, and individuals. The Federal Trade Commission (FTC) is a government agency that works to protect consumers from scams and fraud. Local law enforcement agencies also play a crucial role in investigating and prosecuting scam cases. By reporting scams to the FTC and local law enforcement, individuals can help bring scammers to justice and prevent further crimes from occurring. Additionally, individuals can protect themselves from scams by being cautious when providing personal information, monitoring their accounts regularly, and being aware of warning signs of scams. Together, we can create a safer digital environment and protect ourselves from the ever-evolving tactics of scammers.
