Facebook Inc. and Facebook Ireland have filed a legal action in Portugal against two people for scraping user-profiles and other data from Facebook’s website, in violation of its Terms of Service and Portugal’s Database Protection Law.
The defendants developed browser extensions and made them available on the Chrome store using the business name “Oink and Stuff,” software company specialized in creating Android apps and browser extensions for Chrome, Firefox, Opera, and Microsoft Edge.
“They misled users into installing the extensions with a privacy policy that claimed they did not collect any personal information”, said Jessica Romero, Director of Platform Enforcement and Litigation at Facebook.
As the company develops a wide array of browser extensions, Facebook said in four extensions namely Web for Instagram plus DM, Blue Messenger, Emoji keyboard, and Green Messenger were malicious and contained hidden computer code that functioned like spyware.
Scraping is a form of data collection that relies on unauthorized automation to extract data from a website or app.
Facebook noted that, when people installed these extensions on their browsers, they were installing concealed code designed to scrape their information from the Facebook website, but also information from the users’ browsers unrelated to Facebook, all without their knowledge.
Upon visiting the Facebook website, the browser extensions were programmed to scrape the user’s name, user ID, gender, relationship status, age group and other information related to their account.
Since early 2019, Facebook’s legal department has been filing lawsuits against several third-parties that have been abusing its platform.
In this case, Facebook at present asking a Portuguese judge to issue a permanent injunction against the Oink and Stuff team and force the company to delete all the Facebook user data they acquired through the four extensions.
The defendants did not compromise Facebook’s security systems. Instead, they used the extensions on the users’ devices to collect information, said Jessica Romero.
You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity, and hacking news updates.
Also Read
Facebook ads Abused to Steal 615000+ Logins in Phishing Campaign
Facebook Takedown Infrastructure of Hacker Groups Targeting Various Government Entities
Gcore, the global edge AI, cloud, network, and security solutions provider, has launched Super Transit,…
Microsoft has urgently patched a high-risk security vulnerability (CVE-2025-29810) in Windows Active Directory Domain Services…
Adobe has announced critical security updates for several of its popular software products, addressing vulnerabilities…
In a disturbing escalation of cyber threats, a new malware campaign dubbed 'HollowQuill' has been…
GreyNoise has noted a sharp escalation in hacking attempts targeting TVT NVMS9000 Digital Video Recorders…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert highlighting a critical vulnerability…