New Massive Malware Outbreak on Facebook

from JoeUser Forums

Facebook most blacklisted site on the net.

I just read this article on TheWindowsClub.com informing on the latest Facebook fiasco and that while supposedly increasing their security measures.

Emsisoft has reported a massive outbreak of new Facebook Malware. One variant even hijacks the user’s Facebook account. Interestingly, it’s passed by using their instant messenger.

Hardly surprising at the site where it’s founder, Mark Zuckerberg’s account was hacked.

Emsisoft discovered the activities of the Facebook threat Trojan-Downloader.Win32.FraudLoad.

Now there is a new version, taking over ones complete Facebook account!

Users of Emsisoft Anti-Malware are already protected from the new variant detected as Worm.Win32.Yimfoca!A2 or Trojan.Win32.Scar!IK.

 

From The Window’s Club: “This Malware uses the Facebook chat system to spread through users. It sends messages to the friends of an infected user, and a link. This link leads to a fake Facebook page stating  “Photo has been Moved.” Everyone clicking “View Photo” obtains the Malware file without even knowing it.”

They go on to explain that “as soon as the file is executed, another browser window is opened,  and either a harmless Myspace or Google page will be opened. The Malware, however remains active invisibly in the background. As soon as the user opens his Facebook account, the malware becomes active again and sends out new photo messages to all friends of the victim. During the next login at Facebook, the login page will be blocked and the malware shows a “Scam Survey” message together with the link “Win an Apple product”. If followed, the user will end up a web page with advertisements or affiliate links.”

“A second variant of this Trojan-Virus shows the message “Today is our 6th Birthday!”, as soon as the Facebook account is opened. If the user changes back to his login page, he sees “Your account has been suspended! The suspend will be released after 80 minutes. The suspend will be disabled only if you fill out one survey!”. The account is not suspended. It’s just a false message from the malware, says Emsisoft. Again the link does not lead to a survey, but to the advertisement page.”

Source: http://www.thewindowsclub.com/new-malware-captures-facebook-account-warns-emsisoft#ixzz1D2V2hKx6

69,006 views 38 replies
Reply #1 from Elemental Forums Top

sad thing is I hate facebook.. yet i still check it once a day out of habit :sheep:

New malware popping up on social networking sites is a given. To paraphrase willie sutton.

Why do you target social networks with malware?

"cause thats where the people are"

Reply #2 from GalCiv2 Forums Top

Is it just me, or does it seem like Facebook gets mentioned in the news a lot... and always for privacy/security issues?

Galactic Civilizations IV
Reply #3 from WinCustomize Forums Top

Facebook is like a whiny child, wanting attention.

 

I sent mine to its room years ago, and threw away the key |-)

Reply #4 from WinCustomize Forums Top

I am looking forward to seeing if Facebook can be toppled.

One upstart is DIASPORA, which will be open source and hopefully free of all the damn garbage like Farmville, etc.

Then there is the guy (former developer) who left Facebook before it exploded and started 'Path' and just turned down 100 million from Google for it.  I'm curious to see what he does with what he is building.

Google wants in the game bad.

I think there is room and a need for a social network but who can create one and keep it 'clean' and free from all this crap that allows data mining, attacks, etc., etc.?  Once they succumb to greed for the almighty dollar and start allowing all these advertisers to purchase info and all that fun stuff, it's just another MySpace.

Reply #5 from WinCustomize Forums Top

I copied the OP for certain people I know who swear by Facebook. This should put a wrinkle in their collective brains.

Reply #6 from WinCustomize Forums Top

Being an 'old fart' I never got into these social networking type of programs.   Not trying them looks like it was a smart move on my part.

Reply #7 from WinCustomize Forums Top

certain people I know who swear by Facebook
End of quote

At this point, there seem to be quite a few folks who swear at it.

 

Reply #8 from WinCustomize Forums Top

The best part of Facebook is the stuff which ends up here:  http://failbook.failblog.org/

Reply #9 from Elemental Forums Top

After getting an embedded Trojan, complements of a facebook targeted malware attack, that necessitated reformatting my HD and reinstalling windows, I deleted my facebook account.  BTW, Doc, Yrag, and others were VERY helpful in getting be back up and running.

 

Since facebook continues to be such a high volume target, a malware magnet of sorts, I am happy I deleted the account.   Any suggestions on alternatives?

Reply #10 from Stardock Forums Top

Anything people use will be a malware magnet.

Personally I haven't seen anything but good old social engineering.  'Click this to do something it actually doesn't do at all!'  Whee.

Reply #11 from WinCustomize Forums Top

I am not pro facebook but I am also not against it. I use it because I have been able to find people I lost contact with. It is also where I first heard about my sister losing her battle with cancer from my Aunt. I am not a phone person and do not even have a landline and not everyone has my email address.

I look at it like this, facebook sucks in many ways and yes there is a chance of getting some type of malware but that can happen with just about any site you visit or at least many. Nothing is guaranteed to be safe. If I get some type of infection I will reformat. It is not the end of the world when you have your stuff backed up.

So for me renewing old acquaintances and keeping informed with important information is worth the risk. I know many will think that is daft and maybe it is but that's fine too. 

Reply #12 from WinCustomize Forums Top

Facebook was something I avoided with a ten foot pole but I think my mother is daft as well. She has not answered an email from me in over a year, I cannot afford the long distance phone calls to her since I lost my job, she, on the other hand was left quite comfortable in my fathers will but will not call me. So, lo and behold about a month or so ago, I get an email from Facebook telling me that she wants to "be my friend". So, in order to interact with her or the rest of my goofy family on the east coast, it is Facebook or nothing. I don't go there unless I get a message from a family member. I might add that I downloaded some brushes from DA and in the file was a Trojan that took over my account and put $500 worth of charges on my debit card eventhough I expressly told DA not to store my card info. I got it all straightened out but I did not even get an apology and they felt they had no responsibility in the whole thing. So, I guess the point is, no where is safe unless  you are constantly vigilant and keep your systems protection updated and heed it's warnings.<3 :meow:

Reply #13 from WinCustomize Forums Top

Certain things JC 'are' more important. Family for one. And you're right about the risk but in all things there is an upside and a downside, the good with the bad as it were. Keeping backups up to date and restricting who has access is about the best any one can do.

Reply #14 from WinCustomize Forums Top

Correct Frankief and Uvah and limit who can view your profile and only share basic information. I never open an external link or even view a video someone sends me because your just asking for problems. I post on my wall and send and read messages and that is it. I might still not be safe but I will deal with the bad when and if it comes.

Reply #15 from WinCustomize Forums Top

I use FB for friends and family and i found people from way back in my past which is cool, Childhood friends, family members, people from when I was in the Navy...etc. FB is not all that bad.

That being said I was notified today that someone tried to hack my FB account, so I had to answer a few security questions and change my password to get back in to my account. FB even showed me where the hack came from.

Reply #16 from WinCustomize Forums Top

Quoting Uvah, reply 13
Certain things JC 'are' more important. Family for one. And you're right about the risk but in all things there is an upside and a downside, the good with the bad as it were. Keeping backups up to date and restricting who has access is about the best any one can do.
End of Uvah's quote

Actually, I think the best and safest thing to do would be to nuke your fb account.

Reply #17 from WinCustomize Forums Top

"Actually, I think the best and safest thing to do would be to nuke your fb account."

Doc I appreciate your post. Do not get me wrong it has a lot of merritt but I am not about to get rid of my account. Its just to valuable a tool for me at this time. If I get hit with something then you can say I told you so. It is more likely to happen if your not facebook savvy. I had got things from friends that I will just not open. I tell them sorry and explain the reason for my concern. 

 

The Packers just won.

Reply #18 from WinCustomize Forums Top

Facebook.... MEH   Don't have an account and never will.

Apart from being not that 'social', it has a very high profile and inevitably will be the target of miscreants seeking fun at the expense of others.

However, I will inform Shaunna of this when she gets home from town.  Her account was recently hacked and used to send other members bad stuff, so now I'll need to check out her rig for malware, etc.

Reply #19 from WinCustomize Forums Top

I know it'll hurt her to find this stuff out as she has such a good time there, mate. Still, better to find out before any serious financial damage is done....

Please tell Shaunna that I'm sorry to be the bearer of ill tidings... only trying to protect friends.

Reply #20 from WinCustomize Forums Top

Quoting DrJBHL, reply 16



Quoting Uvah,
reply 13
Certain things JC 'are' more important. Family for one. And you're right about the risk but in all things there is an upside and a downside, the good with the bad as it were. Keeping backups up to date and restricting who has access is about the best any one can do.


Actually, I think the best and safest thing to do would be to nuke your fb account.
End of DrJBHL's quote

I see your account is still active?

Reply #21 from WinCustomize Forums Top

I know. I tried to delete it or get them to do it but no go. Twice emailed them.

Reply #22 from WinCustomize Forums Top

I keep it only because I don't know how friends would take it were I to close it down. You can't even really close it... you 'suspend' for 6 months then have to decide. I have a host of high school friends and others who came through life, like those here.

The safest thing to do would be to nuke it. Here at WC, I still have Ed's old PM's because I can't bring myself to discard them. I don't visit fb often. I don't accept 'gifts' from friends nor play any games and don't use the im.

I suppose I could ask everyone his email, but doing that more than 100 times daunts me. I think today's the day to suspend it and if things don't improve there to end it. I can only justify doing that by thinking about everything I might lose if I don't. Despite backing up.

*done - This is the message I posted on my Wall:

I'm suspending and probably going to end this account because of all the security breaches here. To all my friends, please send your email so we can keep in touch.
Sorry to take this step, but I don't see an alternative. :(

Not likely. I informed them that the reason I was leaving was the Malware attacks on their site and lack of security.

Reply #23 from JoeUser Forums Top

As I do not use Facebook, I think I am safe from the bugs.  But this article prompts the following observation.  About 2 weeks ago, Fox News Ran an article about "Has Facebook Peaked?".  It was just a speculative article, with not a lot of substance.

But over the past 6 months there have been a handful of Facebook articles on Stardock.  And I have noticed a trend.  6 months ago, those of us who did not like it were in the definite minority.  But reading the comments here today, the best accolade I see for it is "I have no choice", hardly a ringing endorsement.

I think Fox may have been right.  Like MySpace before it (and all the other fads), I think Facebook is now in decline.  You will not see the numbers for it soon, but eventually I think historians will look back on 2010 as the year that killed facebook - because of malware and privacy issues.

Reply #25 from JoeUser Forums Top

You can't even really close it... you 'suspend' for 6 months then have to decide. I
End of quote

Here's an Article on how to delete it.

However, The doc is right (as always). It disables it for 6 months before it is actually deleted. But it has to be "quiet", so this article steps you through the process.  They do not make it easy.