Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Facebook virus spreads via photo album chat messages - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Facebook virus spreads via photo album chat messages

New year comes with more malware. This time facebook users can see inside their chat messages a link pointing to a picture. That link looks like an application link, but this time it doesn't ask for your permission to install and have access to your personal info. Instead, victim is showed a "View picture" button that tricks them to download the malware.

Social networks are very interesting and Social networks are a useful source of information and will remain as one of the innovations that will constantly change the way most human interact, but equally will remain as one of the most favorite sources for attackers to compromise the information of their victims. For this reason, it is extremely important that users of social networks only work with applications that are well known and not get carried away on scams like the recently one about Tupac Shakur.

More information at http://www.theregister.co.uk/2011/01/10/facebook_worm_photo_chat_scam/

-- Manuel Humberto Santander Peláez | http://twitter.com/manuelsantander | http://manuel.santander.name | msantand at isc dot sans dot org

Manuel Humberto Santander Pelaacuteez

185 Posts
ISC Handler
Whilst not perfect, I'm very impressed with the new free BitDefender service at http://apps.facebook.com/bd-safego/ and
http://www.facebook.com/bitdefender.safego

This scans your account for 'dodgy' posts and messages, warning you if necessary / posting a warning link on your wall if you want. It also can check your privacy settings to let you know if you have any holes you might not know about there. It's not well known and I must admit I'm not too sure how effective it is at detection yet, but it's one of the most promising things I've seen on Facebook for some time.
Anonymous

Sign Up for Free or Log In to start participating in the conversation!