Attention: We have transitioned to a new AAD or Microsoft Entra ID from the week of May 20, 2024. In case your tenant requires admin consent, please refer to this document located at Overview of user and admin consent - Microsoft Entra ID | Microsoft Learn and grant access to App ID: 6ba09155-cb24-475b-b24f-b4e28fc74365 with graph permissions for Directory.Read.All and User.Read for continued access. While the app may appear unverified, you can confirm its legitimacy by verifying the App ID provided.
When installed, Trojan:JS/Febipos.E tries to read a configuration file from remote server supbr.info/sqlvarbr.php.
The configuration file contains a list of commands for the trojan to do in a logged on Facebook account. This includes instructions to:
Like a page
Share
Post
Join a group
Invite friends to a group
Chat to friends
Comment on a post
Posts Facebook messages
We have seen Trojan:JS/Febipos.E post the following messages in Portuguese on the wall of a logged in Facebook account. It can also tag several of your friends:
Encontrei um vÃdeo no Youtube ensinando a ganhar $$ na Internet pelo Google! Acho que vale a pena I found a video on Youtube teaching how to earn $$ on the internet through Google! I think it’s worth it.
Dificuldades para PERDER PESO? Com ULTRA SLIM você emagrece sem sofrer! Struggling to lose weight? With ULTRA SLIM you lose weight without suffering!
PERCA PESO, GANHE SAÚDE E AUTO-ESTIMA. SÓ DEPENDE DE VOCÊ. Lose weight, gain in health and self-steem. It’s only up to you.
Encontrei um vÃdeo no Youtube ensinando a ganhar $$ na Internet pelo Google! I found a video on Youtube teaching how to earn $$ on the internet through Google!
Oportunidade: Google paga R$160 por hora para trabalhar em Casa! Opportunity: Google pays R$ 160 per hour to work from home!
Ganhe R$15.000 por mês trabalhando em Casa na Internet. Acesse o Link e saiba como! Earn R$15,000 per month working from home on the internet. Click on the link and find out how!
One of the following URLs is also included in the message: