Tor_address in www.facebook.com

On 2018-12-06T17:41:39.644914+00:00 we found suspicious pattern Tor_address, type: Suspicious, (Tor .onion address) in the page https://www.facebook.com/plugins/shar... referenced from http://www.santaletter.com/ .

The suspicious code sample:

b'facebookcorewwwi\\.onion'

This feature is experimental so please feel free to contact us if you feel any of the reported issues is a false positive or you want to suggest a pattern that should be detected (we are using Yara standard).

Fully automated RESTful API is now available. Subscribe for your free trial today!