Summary: A resurgence of malware attacks in the Middle East and North Africa has been linked to a threat actor known as “Dexter Ly,” who is using politically charged Facebook advertisements to spread malware. These ads lure users into clicking malicious links that lead to fake news sites claiming to leak sensitive information, ultimately infecting devices with credential-stealing software. Despite Facebook’s claims of enhancing content moderation, the platform has struggled to effectively combat these sophisticated phishing campaigns.
Affected: Individuals across the Middle East and North Africa, particularly Libyan citizens
Keypoints :
- Politically charged Facebook ads are a key tactic used to distribute malware.
- Victims are lured with fake news reports that create urgency and anxiety, leading to risky clicks.
- Facebook has not effectively enforced its advertising policies despite the rise in such campaigns.