Facebook Phishing

[-REECE-]

Just a warning to all Facebook users out there that a powerful new variant of a worm first seen on Myspace in August 2008 is maliciously targeting Facebook users, attempting to steal sensitive information, such as credit card numbers.

If you receive a message saying something along the lines of “You look funny in the new video/movie”, stay away. Should you click the link provided in the message, you’ll be prompted to download an executable file — whatever you do, don’t download it!

For more information on Facebook security, please see: http://www.facebook.com/security .

 

[Joseph]

Its also spreading via Bebo and MSN too :td:

 

[weblord]

recorded by symantec as well
http://www.symantec.com/business/security_response/attacksignatures/detail.jsp?asid=23018
http://www.symantec.com/business/security_response/attacksignatures/detail.jsp?asid=23018
http://www.symantec.com/business/security_response/attacksignatures/detail.jsp?asid=50108
don't use the facebook image uploader
Image Uploader 4.5.57.0 is vulnerable; other versions may also be affected.
Affected

* Facebook ImageUploader4.ocx 4.5.57
* Facebook ImageUploader4.1.ocx 4.5.57
just use the html image uploader if you have to upload a photo
http://www.securityfocus.com/bid/27756 << - more info.

if you can find ImageUploader*.* or ImageUploader*.ocx in your files then just delete it or use the uninstaller for the said ImageUploader version.

Just a warning to all Facebook users out there that a powerful new variant of a worm first seen on Myspace in August 2008 is maliciously targeting Facebook users, attempting to steal sensitive information, such as credit card numbers.

If you receive a message saying something along the lines of “You look funny in the new video/movie”, stay away. Should you click the link provided in the message, you’ll be prompted to download an executable file — whatever you do, don’t download it!

For more information on Facebook security, please see: http://www.facebook.com/security .