Cryptocurrency mining malware is spreading on Facebook Messenger in Vietnam

Since the morning of December 19, in Vietnam, many users of the Facebook Messenger application have been infected with a very dangerous cryptocurrency mining malware.

This cryptocurrency mining malware is spreading rapidly through Facebook Messenger, turning the computers of many users in Vietnam into cryptocurrency mining tools.

Accordingly, many Facebook Messenger users reported that many friends in their Friend List sent them a message on Facebook Messenger containing a Zip file (named "Video_xxxx" where xxxx are 4 random numbers) via Facebook Messenger.

When the recipient opens this file, they will see a fake video file inside. If they continue to open the fake file, the computer will be infected with malware. If the victim's computer uses the Google Chrome browser, the malware will install an extension to continue spreading the Zip file via Facebook Messenger to the victim's friends list.

Malware is spreading rapidly through Facebook Messenger.

A representative of the Bkav cybersecurity company said that the purpose of spreading the malware is to take control of the computer. At the same time, it uses the computer to mine virtual currency, causing the victim's computer to constantly lag and become almost unusable.

Bkav also recommends that users should immediately change the password for their browser login account if they accidentally open the attached compressed file. In addition, to avoid becoming a victim, users need to be vigilant when receiving files sent via Facebook Messenger, and need to confirm with the sender to make sure that the file is sent to them.

In addition, you should use strong anti-virus programs to scan your entire computer if you accidentally open these files.

In early November, the Vietnam Computer Emergency Response Center (VNCERT) also said that through monitoring incidents in Vietnam's cyberspace, the VNCERT Center recorded many information security incidents related to the Coinhive cryptocurrency mining malware hidden on websites.

Viruses spread via Facebook Messenger are not new, but they appeal to the curiosity of Vietnamese users.

When users access the website, the Coinhive code library will automatically run on the user's computer as an extension or directly in the browser with the purpose of "mining" virtual currency Bitcoin, Monero... by illegally using the user's resources such as: CPU, hard drive, memory... and sending it to the hacker's electronic wallet.

According to VNCERT, with these cryptocurrency mining malware, users should check the computer's CPU usage performance using applications such as Windows Task Manager and Resource Monitor. If the computer shows signs of slowing down and the CPU usage performance of browsers or extensions increases, the computer may be infected with Coinhive. It is necessary to immediately notify the network administrator or expert for handling.

In addition, it is necessary to regularly check and scan for existing vulnerabilities on the system to promptly detect the appearance of malicious code. In case of detecting vulnerabilities, immediately deploy corrective measures, update additional patches and remove malicious programs that have been inserted by hackers.

According to Young Knowledge