Chris Salmon Technologies

New password-stealing virus targets Facebook

There is an email that is being sent to Facebook users, likely to have a return address such as This e-mail address is being protected from spambots. You need JavaScript enabled to view it , ( This e-mail address is being protected from spambots. You need JavaScript enabled to view it is another obvious one) that claims that your facebook password has been "reset" and asks you to click on an attachment that will assign you a new password.

The attachment will contain several different types of malicious code, including apparently at minimum a trojan horse and a password stealing program, and possibly a keylogger that records all your keystrokes and sends them to a remote location.

The criminals behind this are not just pulling a prank - they are serious professionals out to access as many bank accounts, credit card accounts, internet access accounts, whatever they can gain from you that will enable them to steal money, assume your identity, or otherwise further their criminal interests.

The fake email is titled "Facebook Password Reset Confirmation! Customer Support."

I was able to find one image of such an email out on the internet:

McAfee estimates that hackers sent out tens of millions of spam across Europe, the United States and Asia since the campaign began on Tuesday.

Dave Marcus, McAfee's director of malware research and communications, said that he expects the hackers will succeed in infecting millions of computers.

"With Facebook as your lure, you potentially have 400 million people that can click on the attachment. If you get 10 percent success, that's 40 million," he said.