The malware spreads by messaging to all of your contacts with a bogus "new profile picture message". It targets all the major web browsers and is also capable of distributing related malware such as Ransomware/LockScreen, as well as steal accounting data for major social networking services such as Facebook, Twitter, as well as related services such as GoDaddy, PayPal and Netflix.