Latest Comments
"I too have been a labor voter for many years and will not be voting for them again. The ..."
by maxt | Feb 9, 2010 7:56 PM
 
"I’ve just had a user receive a rehashed version of this with an attached html file containing a ..."
by Owen Lutz | Feb 9, 2010 6:01 PM
 
"hi"
by manish kumar | Feb 9, 2010 4:27 PM
 
"Hey 'hey con-roy' ... from Google Australia's head of policy Iarla Flynn"We don't believe that ..."
by Keep it real | Feb 9, 2010 3:33 PM
 
"@penno Off-site storage is a good solution unless you have some decent backup software to ..."
by Charmgene | Feb 9, 2010 2:36 PM

Facebook user profiles hacked, Wall feature relaying spam

  • Email a Friend
  • Print Page
Facebook user profiles hacked, Wall feature relaying spam
By Negar Salek
Mar 31, 2008 2:07 PM | 17 Comments
Tags: facebook | facebook | security | facebook | spam | google | news
Privacy woes continue to plague Facebook this week following the revelation that a spam campaign is hijacking user accounts and posting messages on the Wall feature of user profiles.

 


UPDATE: For information on the latest attacks on social media sites, see our coverage here:
iTnews - Hacker attacks silence Twitter, slow Facebook
CRN - Attacks on social networking sites fade away
SC Magazine - Twitter, Facebook and LiveJournal attacked


According to security vendor Fortinet, the spam messages link to typical spam sites such as online pharmacy shops, one of which has been sourced to a web host that also serves content for several pill pushing sites.

Fortinet’s Global Security Research Team warned that Wall posts containing links must be handled with care and recommends they should not be followed.

“While hijacked accounts have not been proved to be utilised for anything beyond posting relatively innocuous spam 2.0, it is not a stretch to think that links to drive-by-install malicious sites could be injected at some point,” warned Fortinet.

Users should be wary of phishing attempts when confronted by a login page or upon clicking a link contained in a friend's message, carefully check the login page URL, advised Fortinet.

Facebook's "Wall" feature, allows users to post comments on friends' profiles.

Meanwhile, the co-author of the book ‘Facebook — Now What???’, Jesse Stay revealed in a blog post last week that the incident may be linked to an application on Facebook known as Secret Crush.

Stay wrote that the application installed Spyware on peoples’ computers and Facebook was forced to remove it in January but two months later it still seemed to be wreaking havoc.

“Doing a search for “crush calculator” on Facebook revealed a few groups users have set up to apologise to their friends for someone hacking into their account and sending messages about the “Crush Calculator”.

Additionally, just last week security researchers uncovered a new wave of attacks in which profiles on Facebook were used to post images - in this case the images were of child torture.

According to Fortinet, Facebook has been notified and is looking into the issue.

 
Ads by Google
Thoughts on this article? Add a comment below.
Comments: 17
Ha ha ha - that's what you get for putting your personal info on facebook.
SC Magazine - comments icon Posted by visitorAug 15, 2008 3:08 AM
This just happened to a friend not 6 hours ago. Hopefully he can get back into his site. To "visitor," thank you for the total non sequitor. "personal info"? It was not mentioned at all in the article. Thanks for playing though.
SC Magazine - comments icon Posted by Douglas BarnesSep 4, 2008 12:49 AM
I searched for information about Facebook spam and spoof e-mail tonight after my husband's account started posting strange "hi, haven't seen you in a while" to friends that he had just seen and included links to various websites, one of which was obscene and others that were "work from home" advertisements. He was literally in his car driving home from a morning of golf with his brother when these started going out. I knew he did not have a computer (he does not own a laptop) and was meeting most of his friends to plan a high school reunion at our house, some of whom had been spammed by my husband's account. We are some of the old folks turning to Facebook to reconnect with friends and are kind of knew to social networking. My Dad just started a Facebook page 2 months ago and had to shut it down within a week when his computer was attacked by malicious malware that he believes came from Facebook. We are now considering closing down our Facebook accounts. What a nuisance. Our daughter said this was a big problem about a year ago on Facebook and Facebook said they thought they had put a stop to it. This is August 2009 -- the problem is apparently as bad as ever!
SC Magazine - comments icon Posted by Visitor1Aug 3, 2009 1:01 PM
I WARNED EVERYONE I COULD BACK IN MARCH ,ABOUT THE HACKERS INVADING FACEBOOK ACCOUNTS,I SUBMITTED CONSTANT REPORTS TO FB AND A GAME CALLED YOVILLE,WHICH ALL MY GRANDCHILDREN AND FAMILY USED.I WAS TRACKING THE HACKERS FOR AGES THEY EVENTUALLY DESTROYED MY LAPTOP.THEY GET IN YOUR COMPUTER AND CHANGE ALL YOUR SECURITY,BY CLONING,THEY ALSO CHANGE ALL YOUR MENU SETTINGS, USE YOUR CAMERA AND MICROPHONE,THEY CAN ALSO DOWNLOAD DEVICES WITHOUT YOU KNOWING.THEY CAN DO SO MUCH DAMAGE AND COST YOU A FORTUNE,NOT TO MENTION THE STRESS.ITS AKIN TO BEING ROBBED AND VIOLATED.PS YOU CAN HAVE ALL THE SECURITY IN THE WORLD AND DO ALL THE RIGHT THINGS TO KEEP SAFE,BUT THEY ARE TO CLEVER AND CAN CLONE EVERYTHING WITHOUT YOU EVEN NOTICING TILL ITS FAR TO LATE.
SC Magazine - comments icon Posted by angelheartAug 13, 2009 9:28 PM
You best trolling angelheart I DIDNT THEY COULD DESTROY YOUR LAPTOP. thats what you get for using failbook. Windows shall inherit the earth.
SC Magazine - comments icon Posted by N00b $m1t3rAug 16, 2009 7:23 PM
Love the caps and tracking the hackers when you can't even use your caps key correctly. Any social networking site leaks data. You put it up they will find ways of taking it down. Good luck social nubs.
SC Magazine - comments icon Posted by JustInTimeAug 17, 2009 11:12 AM
Yep, seems as though something has gained access to my Facebook account and is spamming my friends on their walls. Have deactivated account. So that's that then.
SC Magazine - comments icon Posted by OllyAug 19, 2009 4:06 AM
hi Anglheart, I think you left your CAPS lock on ! If you got infected, too bad as for everyone else use the proper tools.
SC Magazine - comments icon Posted by MalAug 20, 2009 8:39 AM
N00b $m1t3r: Windows shall inherit the earth? You mean to tell me you haven't noticed the impending rule of Google?
SC Magazine - comments icon Posted by MarkSep 14, 2009 12:21 PM
Why would you deactivate your account? Just change your password. You'd do more to format your hdd than deactivating your account. Obviously your computer is already compromised if spyware or some browser hijack has stolen your facebook password. I don't actually recommend formatting, just saying facebook itself isn't what's invading your machine. With all the free tools out there to secure your pc I don't see how people keep letting this happen to them. If you download and use just spybot, malwarebytes and any of the MANY free antivirus programs you'd have much less to worry about.
SC Magazine - comments icon Posted by oinariNov 15, 2009 9:23 AM
my fb profile was hacked n tht person hd changed all my settings and pws. then i somehow loggd to it n deactivated. bt nw he hs again hacked using another new e mail to log in. now i need to delete it completely. please help me
SC Magazine - comments icon Posted by manshiDec 20, 2009 7:11 PM
Today 6 friends notified me that I was in London and had been mugged and needed them to send them money via Western Union. This all happened the same time. I learned that my e-mail had been changed and my pass word. I found it difficult to communicate with fb. I learned that there is a look a like fb out there too.
SC Magazine - comments icon Posted by Lucille Dec 28, 2009 4:10 PM
This happened to my Facebook account today too, same London story and one friend actually sent the money. I feel so bad, has anyone learned a course of action?
SC Magazine - comments icon Posted by WorriedDec 30, 2009 12:10 PM
has anybody gotten emails exclaiming that Oh my god is this you? from facebook? My wife did and when she tried to open it just took her to a blank page.
SC Magazine - comments icon Posted by markJan 19, 2010 10:40 AM
If the privacy settings gave an option for posting on the walls of others, this wouldn't be a problem. Most of this wall-posting process is automated, so a default of sharing with 'nobody' prevents spam notifications being sent out. And if the password is clearly compromised and not changed then the person is a moron and deserved it anyway. You'd get your house and car locks changed if you knew someone had stolen the key, so why not an electronic account? As far as sending money goes, if you didn't know the person well enough to know they were not in London, you shouldn't be sending money. If you did know them well enough, you would call their mobile?
SC Magazine - comments icon Posted by sighJan 23, 2010 2:33 PM
I can no longer use facebook because they are saying my e mail and my password are not compatable.I have been using this password for months now and had no trouble up to now.
SC Magazine - comments icon Posted by Irene loringFeb 5, 2010 5:19 PM
I can no longer use facebook because they are saying my e mail and my password are not compatable.I have been using this password for months now and had no trouble up to now.
SC Magazine - comments icon Posted by Irene loringFeb 5, 2010 5:19 PM
Report this comment as offensive:

   * Indicates information we require to process your submission.

Name: *
Email: *
Reason for offense: *
Your report will not be displayed.  
Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below:

 

 
 
 
 
 
 
Messaging Whitepapers