Facebook and MySpace users hit by cyber attacks
Friday 06 November 2009
Facebook users - already being targeted in a malware campaign - are now under threat from a phishing scam.
Security specialists Symantec report that the company's systems have picked up fake messages that appear to be sent by the social networking service.
Users will receive an email that looks like an official Facebook invite or a password reset confirmation.
If a duped user clicks on the 'update' button they will be redirected a fake Facebook site. They will then be asked to enter a password to complete the updating process.
As soon as the unwitting Facebook user does this, their password is in the hands of cybercriminals.
Dodgy subject lines for the phishing emails are: 'Facebook account update,' New login system' or 'Facebook update tool'.
The malware campaign that is still targeting Facebook is also propagated via email. This time, the message looks like a Facebook notification that the recipient's password has been reset.
It includes a zip file that, if opened, launches an .exe file, which Symantec's Security Response centre says is a net nasty called Trojan.Bredolab.
Once a users' machine is infected by this malware, it secretly dials back to a Russian domain and, Symantec says, "is most likely becoming part of a Bredolab botnet."
But it isn't just Facebook that is being lined up by cybercriminals; News Corp's MySpace is also under attack.
Potentially dangerous email subject lines to look out for are: 'Myspace Password Reset Confirmation,' 'Myspace office on fire' and 'Myspace was ruined'.
Symantec believes there will be another attack on MySpace in the next day or two.
"We also think that social networking sites with huge user bases are currently being targeted to infect maximum machines or gather passwords for more malicious activities in future," the security team said in a statement.
It advised users to be extra-careful of suspicious attachments, especially those including password reset requests. Legitimate websites will not send an attachment for resetting a password, it said.
Source: NZ Herald
Life & Style blogs
What marriage would look like if we actually followed the Bible
Overly-controlling parents cause their children lifelong psychological damage, says study
What do the emojis on Snapchat mean?
Star Wars BB-8 droid toy is real, should be impossible
Orthorexia nervosa: How becoming obsessed with healthy eating can lead to malnutrition
Britain to take more refugees as Cameron bows to pressure after more than 250,000 back our campaign
Senior British politicians tell David Cameron: When dead children are being washed up on beaches – it's time to act
Jeremy Corbyn calls Osama bin Laden's killing a 'tragedy' - but was it taken out of context?
If these extraordinarily powerful images of a dead Syrian child washed up on a beach don't change Europe's attitude to refugees, what will?
If you're not already angry about the refugee crisis, here's a history lesson to remind you why you really should be
Refugees welcome: More than 250,000 sign Independent petition calling for Britain to 'take its fair share'
- 1 What marriage would look like if we actually followed the Bible
- 2 President Obama leaves touching comment on Humans of New York photo from Iran
- 3 If these extraordinarily powerful images of a dead Syrian child washed up on a beach don't change Europe's attitude to refugees, what will?
- 4 The Chinese city where men have 'three girlfriends because there are so many women'
- 5 'Heartbreaking' Syria orphan photo wasn't taken in Syria and not of orphan
iJobs Gadgets & Tech
£25000 per annum: Recruitment Genius: The IT Support Engineer is needed to ass...
£22000 - £30000 per annum: Recruitment Genius: This is an exciting opportunity...
£35000 - £40000 per annum: Recruitment Genius: A great opportunity to join a p...
Negotiable: Recruitment Genius: Do you get a buzz from thinking up new ideas a...