SA Footy

Facebook users are being warned not to download a video embedded in a message left on their 'Wall' as it opens a malware attack.


The message, posted by a 'Facebook friend', urges members to click on a link to view a video on a website supposedly hosted by Google.


From there surfers are told they need a new version of Adobe's Flash player to watch the executable video.


The file, once downloaded executes a Trojan virus and funnels malicious code into the users computer. Once it is fully downloaded an image of a court jester (pictured) sticking his tongue out appears.




"People have got to learn that clicking on links in messages to websites can lead to a malware infection, whether the messages are in your email or on a site like Facebook," said Graham Cluley, senior technology consultant for Sophos.


"There has been a flurry of malicious emails recently posing as links to videos - so there's really no excuse not to know of this trick being commonly used by hackers at the moment," he added.

Facebook 'friend' hides a worm
September 26, 2008
Web User

Worm Security researchers are warning of an email scam that informs recipients that an old schoolfriend wants to add them as a friend on Facebook.

The message appears to come from a legitimate email address and is laid out to look like the format of Facebook's homepage.

Trend Micro explained that the cybercriminals had also taken steps to make the email seem genuine by linking to the Facebook website.

"All of the links found in the message body lead potential victims directly to the legitimate Facebook site, with the exception of the login button, which draws a blank page because of an intentionally incorrect URL format," said Rex Sumo, a fraud analyst at Trend Micro.

However, what the criminals behind the scam really want you to do is to open the file attached to the email, which a recipient may believe contains information as to the identity of the mysterious 'friend'.

Opening the attachment, however, initiates the download of a worm that will infect your PC.

This is not the only attack that has attempted to play on Facebook's popularity in recent weeks, Trend Micro said.

"Interestingly, two notable worms used Facebook a month ago in their propagation routines. The popularity of social-networking sites are clearly targeted for cybercriminals who are intent on infecting more users," said Sumo.

The company advised emailers not to download attachments on emails from unknown sources.

If you think you have been infected by the worm, run a full scan of your PC, though you may need to contact the firm that provides your internet security software for removal instructions.

www.trendmicro.com

JAS wrote:Not worth starting a new thread so bumped to give everyone the heads-up on a new potential threat...this time it's a worm...
Regards
JAS

http://www.webuser.co.uk/news/268641.html?aff=rss