Business | CES | Digital audio | Gadgets | Games | Green computing | Home entertainment | Internet & broadband | Laptops | Linux | Macs | PC Peripherals & components | PC security | PCs & laptops | Mobile phones | Digital photography & video | Software | Wi-Fi & networking
AMD | Apple | BT | Dell | Google | HP | Intel | Microsoft | Nvidia | Sony
Windows XP | Windows Vista | Windows 7 | Apple iPhone | BlackBerry | Apple iPad
August 8, 2008
Hackers are using Facebook's Wall messaging tool to target social networking users with malware.
The malware attack comes in the form of a Wall message supposedly posted by a friend that urges members to click on a link to view a video on a website supposedly hosted by Google, said Graham Cluley, senior technology consultant for Sophos.
However, the link takes users to a web page that isn't hosted by Google, where they are told they need a new version of Adobe's Flash player and are urged to download an executable file to watch the video.
The file is really a Trojan horse, Troj/Dloadr-BPL, that funnels other malicious code detected as Troj/Agent-HJX into users' machines. Once it has done that, it displays an image of a court jester sticking his tongue out.
While on the surface this might seem a practical joke from a friend, in reality it means the PC has been compromised and malicious hackers have gained control over it to use it for a variety of purposes, such as sending spam or distributing malware. "They now own your PC," Cluley said.
Malicious hackers have been employing this malware distribution technique for many years on email messages, so many users know to avoid these traps. However, people may be less vigilant in more closed and controlled environments such as social-networking sites.
For example, in this case, the malicious Wall message is masked as coming from someone on the user's list of Facebook friends, increasing the likelihood that the link will be clicked on. "Be very suspicious of Wall postings asking you to click on a link to go watch a video," he said.
Free whitepaper: Phishing for victims - Truth, myth and cybercrime
<<newer story | back to index | older story>>
Submit to:Digg
Slashdot
Del.icio.us
Reddit
Subscribe to PC Advisor now and claim your FREE gift
Does your smartphone replace your need for a laptop when on the move?
% of PC Advisor readers agree with you
What tasks can your smartphone do that would have traditionally been done on a laptop?
Follow the conversation at @SmartphoneFocus
web browsing, search facilities, voip, email, word processing everything RT @Graham_D_C
Mainly email but getting better at spreadsheets etc, RT @IDGdan
Comments received
susan said on Sunday, 10 August 2008
I think I may have allready clicked on this, I remember trying to dowload someything but still being unable to view friends videos. What can I do ?