How to ensure your Facebook Business accounts are safe from malware attacks

Cybercriminals are using a version of Ducktail family malware to target Facebook Business accounts by sending theme-based image archives containing concealed malware files. Once installed, the malware scans for Chromium based browser shortcuts and installs an extension which monitors tabs for ads and business accounts, specifically looking for Facebook credentials. The extension then steals active Facebook accounts and session cookies. Users are urged not to download suspect files and to regularly check browser extensions.