Don’t click “Chrome: The ‘HoeflerText’ font wasn’t found scam”

by CIRT Team

Researchers at Proofpoint discovered an infection technique which targets only chrome users on Windows. The Chrome users are targeted with Font Wasn’t Found Social Engineering Scheme if they navigate to a compromised website through search engines.

Once users runs the downloaded file dubbed as “Chrome_Font.exe”, it gets installed and infects the user system. Upon infection, the computer will start browsing in the background on its own.

Mitigation: Users are always recommended to exercise caution when downloading anything from the Internet onto their computers, to keep your antivirus software up-to-date and do not ever fall for scam asking you to update the Chrome font pack.  If users apparently meet any such website, advised to ‘force close’ the chrome application and delete browser data for safer browsing.

Reference URL’s:

• http://www.cybrnow.com/font-wasnt-found-social-engineering-scheme/
• https://www.ghacks.net/2017/02/24/chrome-the-hoeflertext-font-wasnt-found-scam/
• https://neosmart.net/blog/2017/beware-of-this-new-chrome-font-wasnt-found-hack/
• http://thehackernews.com/2017/02/HoeflerText-font-chrome.html

CIRT Team

Recommended Posts

Active Exploitation of Critical F5 BIG – IP Vulnerability (CVE–2023-46747) Uncovered in Bangladesh

06 Nov 2024 - Security Advisories & Alerts

Emerging Threat_Stealer Malware (Lumma C2) Campaign with fake CAPTCHA pages

08 Oct 2024 - Security Advisories & Alerts

Detection of Fog Ransomware Footprint in Cyber Space of Bangladesh

12 Sep 2024 - Security Advisories & Alerts