The Facebook messenger virus is back and this time, it comes with a newer version identified as Digmine. Although, Digmine is a kind of Monero cryptocurrency mining malware which mainly proliferates with the help of a fake video link through Facebook Messenger application and primarily targeting the users in Thailand, South Korea, Philippines, Ukraine, Vietnam, Venezuela and Azerbaijan. However, it has the ability to attack the web surfers from all across the globe. However, it is important for you to understand that Digmine cryptocurrency mining malware only targets the web or desktop versions of Facebook Messenger app which is installed only in Google Chrome browser.
Therefore, Digmine cryptocurrency miner is not capable of using your smartphone for mining virtual money. Although, this cryptocurrency mining malware follows the same pattern that RMV security experts have seen in previous variants of Facebook Messenger virus. In this case, the threat send a bogus video link, which once clicked, can result in the downloading of malicious components related to malware on your Windows machine. There after, the malware continues propagating through the contacts saved on your system. More interestingly, this newer variant of Facebook messenger virus does not hijack the user’s account of Facebook which is slightly differ from the older version of this malware.
Malware researchers from a reputed security firm Trend Micro revealed that the structure of Digmine cryptocurrency miner can add the feature of hijacking user’s Facebook account if the criminal hackers would like to. The threat mainly takes the advantage of auto-login feature of Facebook. At the time of writing this security article, the virus proliferates through Facebook Messenger app, in case if the user enabled their automatic login to the Facebook. The threat downloads the malicious components to the user’s machine via its Command and Control server when the targeted users click on an intrusive link. Once Digmine cryptocurrency mining malware gets inside the user’s device, it relaunches the Chrome browser to make sure that its dubious extension is loaded.
The main purpose of Digmine Monero miner virus is to mine virtual currency. Hence, it is especially programmed by the con artists to remain on the affected computer as long as possible and infect as many systems as possible to mine maximum virtual money. At the time of installing itself onto the targeted Windows PC, it also downloads ‘codex.exe’ file which is known as a miner management component in order to communicate with other C&C servers. Therefore, cyber security experts strongly advise the web surfers to strengthen the security of their Facebook and other social media accounts. Also, avoid clicking on suspicious looking video links or ads to protect yourself from Digmine cryptocurrency mining malware and other viruses tool.