Over the last couple of days, multi-tasking cybercriminals have been spreading a “Facebook Profile Spy” campaign across Facebook, enticing users into installing a rogue Chrome extension, next to monetizing the campaign through an unethical pseudo-mobile marketing agency, known as Prizerally.
Sample redirection chain: hxxps://www.facebook.com/pages/Hajmc1rnjr/172683159561584?sk=app_190322544333196&9DyG45 -> hxxp://horribleapps.com -> hxxp://terribleapps.com -> hxxps://chrome.google.com/webstore/detail/oacggeibdmjpmecojanlbbngabkincif -> hxxp://www.picapplication.com/profile/last.html?1 -> hxxp://flightdealsrome.net/?subid=4563 ...