Security experts have warned site owners that want to add social media share buttons to their web pages that hackers are hiding FlashPack malware in legitimate looking website add-ons.
FlashPack is an exploit kit which delivers various Flash exploits including one which targets a Flash vulnerability (CVE-2014-0497) which was patched back in February.
It’ll also download the Carberp information-stealing trojan to open a backdoor on the victim’s machine, according to Trend Micro fraud researcher, Joseph Chen.