Originally detected in Brazil, the malware is called Trojan:JS/Febipos.A, where it will attempt to update itself in the same way as regular legitimate browser extensions. The moment it is downloaded, the Trojan will get to work right away, keeping track on whether the infected computer is logged into a Facebook account, and it will then try to download a configuration file which will include a list of commands for the browser extension. This particular malware will then gain the ability to perform a range of Facebook actions, ranging from from liking a page to sharing, posting, joining a group, and chatting with the account holder’s friends. In fact, other variants of this pesky trojan will also come with commands that can post provocative messages written in the Portuguese language, which could possibly contain other links to different Facebook pages.
So far, there is no indication from Microsoft as to how the malware managed to install itself, or on how widespread the infection is.