Sydney: Social networking site Facebook faced a third phishing attack on the weekend, with a malware, which steals login credentials and even gets home addresses, being downloaded through a video.
According to WebSense, the malware is spread via a “hilarious video” posted to Facebook walls, which when clicked, produces a form requesting login information, reports the Sydney Morning Herald.
The attack then returns one to Facebook, installs an app called “Media Player HD”, and asks one to download the “FLV player”, which upon doing so installs malware on the machine.
And that is not the only way it attacks. Depending on the location, one may also be presented with a contest to win an iPad, and all one would have to do is enter the home address.
In order to avoid the malware, one needs to remove the “hilarious video” if found on the Facebook wall.
And if it is seen elsewhere on Facebook, users are to remember not to click on it, and to of course remember the obvious rule: Don’t enter your Facebook login anywhere other than on Facebook.com.
In case a person has already clicked on it, all he or she needs to do is change the Facebook password, uninstall the Facebook app (often called “Media Player HD”), and run a virus/malware scan on the computer.