Facebook - Please avoid the Profile Music Player spam attacks
Tuesday, May 24, 2011 3:26 PM
Please avoid spammed messages features a new Facebook music player feature. This will compromise your Facebook account plus it may create malware infections on your PC as well. Trend Labs warns of this new attack below:
Trend Labs - Facebook Spam Now Plays Your Favorite Music
QUOTE: Wouldn’t it be cool if you had immediate access to your favorite music and bands? What if these are readily available on your favorite social networking site? Unfortunately, spammers also find this cool. We recently noted messages and wall posts circulating on Facebook that promote a supposed new music player feature.
The script used in this spam run is now detected by Trend Micro as JS_FBJACK.B. Similar to other previously reported Facebook spam runs, once users access the alleged link, they are redirected to a site that tells them to follow several steps. The first of which is to copy a particular snippet of code onto their browser address bars, reminiscent of the “See You… In 20 Years!” Facebook attack, which spread via multiple features.
Once done, the malicious script accesses the affected user’s Facebook friends list. From this list, it creates wall posts and sends chat messages to the accumulated Facebook contacts. The wall post and message read: “FaceBook finally added a profile music player! I’ve been wanting one of these forever! [LINK]“ All of the links above currently redirect to a single URL, a scam site telling the affected users that they won a certain prize. The site then asks them to give out personal information.