I don't normally pass on warnings about viruses etc which usually turn out to be spurious, but this one is genuine (on PC Advisor website today) so be careful if you get any messages appearing to come from FaceBook. (And I know that 75% of you will not care what happens as you're not users - not really sure why I'm on it myself!)
A massive bot-based attack has been hitting Facebook users, with nearly three-quarters of a million users receiving fake password reset messages, according to security researchers. The attack targets Facebook users with a spoofed message that claims recipients' Facebook passwords have been reset as a security measure.
The messages, which come bearing subject lines such as 'Facebook Password Reset Confirmation', include a file attachment that supposedly contains the new password. In fact, the attached .zip file includes a Trojan downloader, dubbed 'Bredlab' by some antivirus companies, 'Bredolab' by others. The downloader grabs a variety of malware from hacker servers, including fake security software, or 'scareware', and installs attack code and rogue antivirus applications on the compromised PCs.
Multiple security companies, including Symantec, Trend Micro, MX Lab and Websense, have put out warnings about the attack campaign. "This variant of Bredolab connects to a Russian domain and the infected machine is most likely becoming part of a Bredolab botnet," said Shunichi Imano, a security researcher at Symantec, in a post to the firm's security blog .
Jamie Tomasello, Cloudmark's abuse operations manager, said her company alone has detected nearly three-quarters of a million phony Facebook messages since Monday. "Our count continues to go up, and is at about 735,000 now," said Tomasello. "It's a pretty high volume."
Facebook did not respond to a request for comment on the attacks, or to questions what it is doing, or can do, to stymie the campaign or warn its users.
Reply With Quote
Very cathartic! 
Originally Posted by dominion
