According to Facebook's indictment, these malicious extensions mainly occurred between 2016 and 2018, with the main victims being Russian users, affecting 63,000 browser users. Unlike previous Cambridge analysis strategies, Sluchevsky and Gorbachov created a question-and-answer service that was done through browser extensions, requiring victims to download malicious tools.
After installation, these applications collect personal data such as user names, gender, age, friends, etc. In addition, these malicious programs also insert advertisements on Facebook accounts and pretend to be from social networks. Sluchevsky and Gorbachov are said to use the names "Amanda Pitt" and "Elena Stelmah" to create these malware. Ask promises to use tests such as: "Who is a modern vampire?" And "Check your computer, do you have all these things?" They created at least 13 false accounts and pages on Facebook.
In court documents, Facebook said it deleted all false accounts on October 12, 2018. About a month later, hackers told the BBC that they had private information from at least 81,000 Facebook accounts, mostly Ukrainian and Russian users. Facebook said the malware attack cost at least $75,000.