NodeStealer Malware Now Targets Facebook Business Accounts on Multiple Browsers

Facebook Business accounts are being targeted by a campaign using NodeStealer to harvest user credentials. The attacks mainly affect Southern Europe and North America across manufacturing services and technology sectors. The malware is distributed via deceptive messages sent via Facebook Messenger from a botnet, urging owners to download ZIP or RAR archive files containing the malware. The new NodeStealer variant can collect data from multiple browsers which can be used for targeted attacks and to take over accounts.