Facebook Takes Aim at Cross-Browser ‘Lily Jade’ Worm

Summary: Facebook sent a cease-and-desist order to Dru Mundorff, a 29-year-old hacker in Phoenix, Arizona, who sells a cross-browser plugin called LilyJade for $1,000 to Hackforums members; the plugin spreads by posting a video link to a user's Facebook wall and requires friends to install it to view the video. LilyJade substitutes the code that determines who gets paid when users click ads on sites including Facebook, Yahoo, YouTube, Bing, Google and MSN, and Mundorff says he has no intention of complying with Facebook's demand.
Bottom line: Mundorff claims customers can make about 50 cents per hour for every 100 users who install the plugin, and customers who bought or trialed it posted statistics purporting to show it spreading to tens of thousands of users per day - numbers that cannot be verified, but that describe a distribution channel running on users' own consent to install.

Read the original at Krebs on Security ↗

Topics: Data Breaches
Related: TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026
City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026