DUCKTAIL Returns financially motivated cyber criminal group active in the wild

WithSecure team uncover the recent activity of malware operation dubbed DUCKTAIL."In short, the operation consists of an information stealer malware that is delivered to targeted victims that primarily operate in the digital marketing and advertisement space. The malware is designed to steal browser cookies and take advantage of authenticated Facebook sessions to steal information from the victim's Facebook account. The operation ultimately hijacks Facebook Business accounts to which the victim has sufficient access. The threat actor uses their gained access to run ads for monetary gain." WithSecure Lab said.
Find the detailed report from WithSecure