Cryptocurrency mining virus in Zip file format is spreading rapidly via Facebook Messenger in Vietnam

A new virus has just been spread via Facebook Messenger that will turn the computers of many users in Vietnam into virtual currency mining tools.

Illustration of malware spreading through Facebook Messenger.

Viruses spread via Facebook Messenger are not new, but they appeal to the curiosity of Vietnamese users. First, a friend in your friend list will send you a zip file (named "video_" + 4 random numbers) via Facebook Messenger.

When the recipient opens this file, they will see a fake file inside. If they open the file inside, their computer will be infected with malware. After infecting the computer, the malware will automatically install an extension to continue spreading the zip file to the victim's friends.

According to Mr. Vu Ngoc Son, Vice President in charge of Anti-malware at Bkav, this virus is currently only spreading through the Chrome browser. The purpose of spreading the malware is to take control of the computer and exploit the computer to mine virtual money, causing the victim's computer to always lag and become almost unusable.

Bkav experts say the most dangerous thing about the new virus spreading through Facebook Messenger is that with this method of spreading malware, bad actors can have the friend lists of many people to continue spamming, spreading scam messages, links with malware...

Bkav also recommends that users should immediately change the password for their browser login account if they accidentally open the attached compressed file. In addition, to avoid becoming a victim, users should not directly open attachments sent via Facebook Messenger, but should open them in a safe isolated environment (Safe Run) to avoid being infected with malware.

Bkav has now updated the malware identification model with the name W32.FBCoinMiner.Worm, users can download the latest version of Bkav software to kill the virus. Customers using the licensed version of Bkav Pro will be automatically updated.

According to VnReview