Facebook Users Targeted in Massive Spam Run
Facebook’s 400 million users have been targeted by a spam run that could infect their computers with malicious software designed to steals passwords and other data. Over the last two days, millions of messages have been sent. The messages appear to come from Facebook, with a return address that looks legitimate but has been spoofed, such as “help@facebook.com”. The messages say that the user’s Facebook password has been reset and the user should download an attachment that contains the new password. The English-language messages are grammatically correct, but contain an odd sign-off: “Thanks, Your Facebook.” The attachment is actually a Trojan horse program, which infects a computer without any visible signs, the spam run contained a variety of malware programs, including password stealers, rogue antivirus programs or botnet code.