Feeds

Rogue apps 'worst Facebook feed malware baddies'

Bonus extras will eff up your feed

Security for virtualized datacentres

Stats from social networking safety apps suggest that one in five items on the news feeds of Facebook users lead to malicious content.

More than three in five (60 per cent) of these attacks come from notifications generated by malicious third-party applications on Facebook's developer platform, according to Romanian-based net security firm BitDefender.

BitDefender's stats comes from users of safego, a free application that scans the user’s wall, message inbox and comments for malicious content, which was released at the end of October. Around 14,000 Facebook users have downloaded safego, with the application scanning over 17 million Facebook posts to date.

Rogue applications commonly claim to offer functionality not supported by Facebook, such as monitoring who has viewed your profile (21.5 per cent of the total); promise bonus items in Facebook games such as Farmville (15.4 per cent); falsely punt bonus features such as a "dislike" button (11.2 per cent); or pose as social network versions of popular games such as Super Mario (7.1 per cent); among other ruses.

Threats that have nothing to do with rogue applications include worms such as Koobface (responsible for 4.6 per cent of all malicious posts) and survey scams, typically falsely promoted as a chance to view some exclusive, newsworthy or titillating content.

BitDefender isn't the only security firm to offer free security ad ons for Facebook to consumers. Websense's Defensio tool is available at no charge to home users and for a small fee to corporates. The tool, which has been available for around a year, moved out of beta in early October with the release of Defensio 2.0.

Stats from Defensio tell a broadly similar to figures from users of BitDefender's tool. "Based on what we see about 40 per cent of all status updates contain a URL and out of those, about 10 per cent are spam or malicious," Patrik Runald, senior manager for security research at Websense, told El Reg. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
NASTY SSL 3.0 vuln to be revealed soon – sources (Update: It's POODLE)
So nasty no one's even whispering until patch is out
Russian hackers exploit 'Sandworm' bug 'to spy on NATO, EU PCs'
Fix imminent from Microsoft for Vista, Server 2008, other stuff
'LulzSec leader Aush0k' found to be naughty boy not worthy of jail
15 months home detention leaves egg on feds' faces as they grab for more power
Forget passwords, let's use SELFIES, says Obama's cyber tsar
Michael Daniel wants to kill passwords dead
FBI boss: We don't want a backdoor, we want the front door to phones
Claims it's what the Founding Fathers would have wanted – catching killers and pedos
Kill off SSL 3.0 NOW: HTTPS savaged by vicious POODLE
Pull it out ASAP, it is SWISS CHEESE
Facebook slurps 'paste sites' for STOLEN passwords, sprinkles on hash and salt
Zuck's ad empire DOESN'T see details in plain text. Phew!
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.