Hackers Use Facebook Access as Bait

With an essentially limitless supply of technologically naive users, Facebook is too tempting for hackers to resist. Larry Barrett reports.

Facebook once again finds itself under attack from hackers looking to spread spam and snare personal information by trying to convince users that their accounts have either been commandeered by spammers or suspended.

With more than 550 million registered users, Facebook provides a fertile – and occasionally embarrassingly insecure – platform for malware authors and nickel-and-dime hackers to ply their trade.

Software vendor Panda Security this week unearthed a pair of new threats that use a similar tactic– the threat of users being unable to access their beloved Facebook accounts – to “wreak havoc,” according to security analysts.

The first scam, identified by PandaLabs researchers as Asprox.N, is a Trojan tucked away in an unsolicited email that advises users that their Facebook accounts are being used to send spam. The irony, of course, is that if someone follows the prescribed directions, which include clicking on a faux Word document supposedly containing a new password, the victim’s PC or mobile device is infected and becomes a vehicle for distributing spam.

Read the rest at eSecurity Planet.