A newly-launched phishing campaign by Ducktail operators is spreading malware via fake lures for games, subtitle files, adult videos, and cracked MS Office applications. The info-stealer, written in PHP, focuses on stealing Facebook account data and any valuable information stored in users’ accounts. Under certain conditions, it can siphon off payment information, cycles, amounts spent, user details, verification status, PayPal address, owned pages, and more.