— — Apps

Facebook ran ads for a fake ‘Clubhouse for PC’ app planted with malware – TechCrunch

1 Mins read

 

Cybercriminals have taken out several Facebook ads masquerading as a Clubhouse app for PC users to target unsuspecting victims with malware, TechCrunch has learned.

TechCrunch was alerted Wednesday to Facebook ads tied to several Facebook pages impersonating Clubhouse, the drop-in audio chat app only available on iPhones. Clicking on the ad would open a fake Clubhouse website, including a mocked-up screenshot of the non-existent PC app’s appearance, with a download link to the malicious app.

When opened, the malicious app tries to communicate with a command and control server to obtain instructions on what to do next. One sandbox analysis of the malware showed the malicious app attempted to infect the isolated machine with ransomware.

But overnight, the fake Clubhouse websites — which were hosted in Russia — went offline. In doing so, the malware also stopped working. Guardicore’s Amit Serper, who tested the malware in a sandbox on Thursday, said the malware received an error from the server and did nothing more. The fake website was set up to look like Clubhouse’s actual website but featuring a malicious PC app. (Image: TechCrunch)

It’s not uncommon for cybercriminals to tailor their malware campaigns to piggyback off the successes of wildly popular apps. Clubhouse reportedly topped more than 8 million global downloads to date despite an invite-only launch. That high demand prompted a scramble to reverse-engineer the app to build bootleg versions of it to evade Clubhouse’s gated walls, but also government censors where the app is blocked.

Each Facebook page impersonating Clubhouse only had a handful of likes but was still active at publication. When reached, Facebook wouldn’t say how many account owners had clicked on the ads pointing to the fake Clubhouse websites.

At least nine ads were placed this week between Tuesday and Thursday. Several of the ads said Clubhouse “is now available for PC,” while another featured a photo of co-founders Paul Davidson and Rohan Seth. The Clubhouse did not return a request for comment.

The ads have been removed from Facebook’s Ad Library, but we have published a copy. It’s also not clear how the ads made it through Facebook’s processes in the first place.

683 posts

About author
Tristan McCue is a 26-year-old junior programmer who enjoys reading, binge-watching boxed sets, and appearing in the background on TV. He is smart and friendly, but can also be very evil and a bit lazy.He is an Australian Christian. He has a post-graduate degree in computing.
Articles
Related posts
— — Apps

Google abused dominant position of Android in India, antitrust probe finds – TechCrunch

1 Mins read
Google has abused the dominant position of Android in India to illegally hurt competitors in the world’s second-largest internet market, a two-year…
— — Apps

Google’s R&D division experiments with newsletters powered by Google Drive – TechCrunch

2 Mins read
Following entries into the newsletter market from tech companies like Facebook and Twitter, Google is now experimenting with newsletters, too. The company’s…
— — Apps

News aggregator SmartNews raises $230 million, valuing its business at $2 billion – TechCrunch

3 Mins read
SmartNews, a Tokyo-headquartered news aggregation website and app that’s grown in popularity despite hefty competition from built-in aggregators like Apple News, today…
Get All Latest Blog Direct In Your Website

Leave a Reply

Your email address will not be published.