New Facebook Worm Spreading By User’s Walls- don’t click da’ button baby!

Popular anti virus developer AVG is warning new worm is spreading on Facebook by user’s walls.

One of AVG blogger says:

Like so many past worms, this one uses a suggestive come-on to lure the unsuspecting into clicking a link, and after some behind-the-scenes shenanigans, it posts a link to the same lure page on the victim’s Facebook wall, if the click-happy victim is currently logged into Facebook.

I’m not much of a Facebooker (in fact, only using it for investigating things like this!) but I’ve heard reports that this is working, as more and more folk’s walls start to look something like this:

Here’s how it works:

This worm uses what is technically known as a CSRF (Cross-site Request Forgery, also called XSRF) attack. A sequence of iframes on the exploit page call a sequence of other pages and scripts, eventually resulting in a form submission to Facebook “as if” the victim had submitted a URL for a wall post and clicked on the “Share” button to confirm the post.

So, at least until Facebook fixes its side of the problem here, be especially careful in which buttons you decide to click, baby!

Share this article

Here’s some of what you missed so far

Tagged as: Facebook, Latest News, virus