A new data kidnapper named SYS01STEALER has been discovered by cybersecurity researchers, targeting employees in critical state infrastructure, production companies, and other sectors. The campaign threatens Facebook business accounts through the use of Google ADS and fake profiles advertising games, adult content, hacked software, and more. The objective is to lure victims to load a malicious file, which then allows the attacker to steal confidential information, including system access, cookies, and business account details.
The report, published by Morphisec, a company working with clients in various industries including finance, healthcare, production, and government agencies, highlights the severity of the threat. Morphisec has partnerships with other cybersecurity companies such as Microsoft and McAfee, and has won multiple awards for its innovative products and decisions.