Hit Search Limited liverpool 0845 643 9289

Facebook stamps out malware attack

By Andrew Redfern @ 11th August 2008 10:48 am

Facebook has blocked links between its social networking site and malware-infested sites to where malicious hackers have been trying to lure Facebook members.

“We’ve identified and blocked the ability to link to the malicious websites from anywhere on Facebook. Less than .002 per cent of people on Facebook have been affected, all of whom we notified and suggested steps to remove the malware,” wrote Max Kelly, Facebook’s head of security, in a blog post early Friday.
Security company Sophos warned on Thursday about the attack, in which malicious hackers were targeting unsuspecting Facebook users via postings on the site’s Wall feature.

The Wall, a core component of Facebook profile pages, is used by members to leave each other messages. Impersonating members’ friends, malicious hackers posted messages urging users to click on a link to view a video on a website they falsely said was hosted by Google.

However, the link took users to a rogue page where they were told to download a new version of Adobe’s Flash player in order to view the video. If users authorized the download, the site would install a Trojan horse, Troj/Dloadr-BPL, that funneled other malicious code detected as Troj/Agent-HJX into their PCs.

Then, an image of a court jester sticking his tongue out would appear, making it seem to Facebook members like an innocent practical joke by a friend. In fact, at that point, the PC had been seriously compromised and put in the control of malicious hackers for sending spam, distributing malware and performing other harmful actions, according to Sophos.

In its alert, the security company also addressed business and IT managers, saying that malware attacks via social networks are on the rise and that companies need to establish policies for employee use of these sites from the office.

Other Related Stories That May Be Of Interest: