Wednesday 28 October 2009

New Virus Masquerades As Facebook Password Reset

Another new virus is spreading through social networks, this time, via Facebook. This one – known as Bredolab – masks itself as a “Password Reset Confirmation Email,” appears to come from Facebook, and attaches a file that purports to contain a new password.

That file is actually a trojan horse that will download a host of nasty files from the Web and infect your computer with them. Email security firm MX Lab explains further:

“Bredolab is a trojan horse that downloads and executes files from the Internet, such as rogue anti-spyware. To bypass firewalls, it injects its own code into legitimate processes svchost.exe and explorer.exe. Bredolab contains anti-sandbox code (the trojan might quit itself when an external program investigates its actions).”

Thankfully, the fix to this issue is really simple. Now that you know the virus is out there, all you have to do is NOT OPEN ANY ATTACHMENTS sent to you by random people claiming to be Facebook. As a general rule, don't open any attachments sent to you by untrusted sources. It's also worth noting that Facebook doesn't change your password with no prior prompting.

No comments:

Related Posts Plugin for WordPress, Blogger...