Facebook Attack Spreading both Windows AND Mac malware !!!!

[INDRANIL]

There's a significant Facebook malware attack occurring at the moment. The attack is spreading virally using Facebook's "Like" feature — a method well established by rogue Cost Per Action (CPA) marketing affiliates. But unlike CPA spam that redirects to deceptive ads, this "viral video" is linking to a Lithuanian server that serves up Windows and/or Mac malware.

This is the first time we've seen malware using "viral links". (Stuff such as Koobface uses phishing and compromised accounts.)

The bait uses the following subject lines: "oh shit, one more really freaky video O_O" and "IMF boss Dominique Strauss-Kahn Exclusive Rape Video - Black lady under attack!" and points to a subdomain on "newtubes.in".

An Openbook search shows numerous examples of folks that have been exposed.

This attack started more 16 hours ago, Facebook does not yet block links to nexxxx.in even though the subject text and the root domain has remained unchanged during that time.

Ok just be careful . Have fun .

Source & more .

[JayCub]

Thank you once again Indra, i haven't been on FB for a bit now, and the links don't interest me, but it is clever the way they use peoples curiosity against them.

[INDRANIL]

Indeed Jay the clever way of social engineering .

[curlysue]

Very nice information there. Thanks dear That is why I do not just click any link there, especially videos.

Another story of malware-threat that Facebook should protect it's users but not doing anything except let it stand and be more popularly for the curious but not-so-security wise user. Facebook seems to cater it more so more visit will be frequent. Bad dog!

[Bearcat]

Thanks for keeping us informed Indra! I personally don't click on anything on FB, unless it comes from a "friend" I trust.

[INDRANIL]

Hmm indeed curlysue as you can see it was there more than 16 hrs no step taken by FB. Yeap Bearcat right. BitDifender Safego is a good application you can use it for extra security. It will warn you if any thing found. Also you can do it manually before clicking any link open safego and click on double check it will tell you if there is any suspicious content. After that you are ready to go and click those " Malicious " links .