Facebook Users Targeted in Massive Spam Run

From PC World: Facebook's 400 million users have been targeted by a spam run that could infect their computers with malicious software designed to steals passwords and other data, according to security researchers at McAfee.

Over the last two days, millions of messages have been sent, which McAfee detected through customers running the company's security software, said Dave Marcus, McAfee's director of security research and communication.

The messages appear to come from Facebook, with a return address that looks legitimate but has been spoofed, such as "help@facebook.com," Marcus said.

The messages say that the user's Facebook password has been reset and the user should download an attachment that contains the new password. The English-language messages are grammatically correct, but contain an odd sign-off: "Thanks, Your Facebook." McAfee has included a screenshot on its blog.

The attachment is actually a Trojan horse program, which infects a computer without any visible signs. Marcus said the spam run contained a variety of malware programs, including password stealers, rogue antivirus programs or botnet code.

View: Article @ Source Site