Feeds

Fake Facebook photo tag ruse smears malware on PCs

Doon't be a foool, doon't click oon that link

Internet Security Threat Report 2014

Spam emails have attempted to trick Facebookers into visiting virus-stuffed web pages by claiming users have been tagged in photos.

The counterfeit messages appear to have been sent by the dominant social networking website, but the "From" address is misspelled as "Faceboook.com" among other mistakes. The emails feature clickable links to a website hosting malicious code, including the infamous Blackhole kit, which tries to gain control of users' systems when visited.

The hacker-controlled website is essentially a malware minefield that attempts to exploit web browser vulnerabilities and security flaws in Adobe applications and Java engines to push malware onto Microsoft Windows PCs.

Seconds after visiting the dodgy website - more than enough time for infection to occur - users are automatically transferred to the legitimate Facebook site, net security firm Sophos reports. This redirection is designed to minimise the possibility that victims will realise they've been attacked.

Sophos has added detection of the malware as Troj-JSRedir-HW. More details of the attack - including screenshots of the offending emails - can be found here. ®

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
UK smart meters arrive in 2020. Hackers have ALREADY found a flaw
Energy summit bods warned of free energy bonanza
DRUPAL-OPCALYPSE! Devs say best assume your CMS is owned
SQLi hole was hit hard, fast, and before most admins knew it needed patching
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Mozilla releases geolocating WiFi sniffer for Android
As if the civilians who never change access point passwords will ever opt out of this one
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.
Reducing the cost and complexity of web vulnerability management
How using vulnerability assessments to identify exploitable weaknesses and take corrective action can reduce the risk of hackers finding your site and attacking it.