<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>MooSoft Musings &#187; facebook</title>
	<atom:link href="http://www.moosoft.com/blog/category/facebook/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.moosoft.com/blog</link>
	<description>The tao of moo</description>
	<lastBuildDate>Mon, 15 Mar 2010 05:35:59 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Facebook &#8220;Unnamed App&#8221; Hoax Leads to Rogue AV</title>
		<link>http://www.moosoft.com/blog/2010/01/27/facebook-unnamed-app-hoax-leads-to-rogue-av/</link>
		<comments>http://www.moosoft.com/blog/2010/01/27/facebook-unnamed-app-hoax-leads-to-rogue-av/#comments</comments>
		<pubDate>Wed, 27 Jan 2010 17:17:29 +0000</pubDate>
		<dc:creator>moosoft</dc:creator>
				<category><![CDATA[facebook]]></category>
		<category><![CDATA[hoax]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[rogue]]></category>
		<category><![CDATA[windows]]></category>
		<category><![CDATA[rogue av]]></category>

		<guid isPermaLink="false">http://www.moosoft.com/blog/?p=238</guid>
		<description><![CDATA[There is a hoax going around on Facebook about a bad application called &#8220;Unnamed App.&#8221;  This is leading people to Google for information on it which is turning up results for Rogue Anti-Virus.  These Rogue Anti-Virus applications try to trick you into installing them by claiming your computer is infected with a variety of malware.
Credit [...]]]></description>
			<content:encoded><![CDATA[<p>There is a hoax going around on Facebook about a bad application called &#8220;Unnamed App.&#8221;  This is leading people to Google for information on it which is turning up results for Rogue Anti-Virus.  These Rogue Anti-Virus applications try to trick you into installing them by claiming your computer is infected with a variety of malware.</p>
<p>Credit goes to Peter Kruse for finding this issue.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.moosoft.com/blog/2010/01/27/facebook-unnamed-app-hoax-leads-to-rogue-av/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Facbook and Zbot Again</title>
		<link>http://www.moosoft.com/blog/2009/11/26/facbook-and-zbot-again/</link>
		<comments>http://www.moosoft.com/blog/2009/11/26/facbook-and-zbot-again/#comments</comments>
		<pubDate>Thu, 26 Nov 2009 17:00:21 +0000</pubDate>
		<dc:creator>moosoft</dc:creator>
				<category><![CDATA[facebook]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[phish]]></category>
		<category><![CDATA[zbot]]></category>

		<guid isPermaLink="false">http://www.moosoft.com/blog/?p=175</guid>
		<description><![CDATA[The latest Facebook and Zbot run starts with an email like this:
From:     Facebook &#60;update+eikyxpuvsr@[].com&#62;
To:     &#60;&#62;
Subject:     Facebook Account Update or Facebook Update Tool

Dear Facebook user,
In an effort to make your online experience safer and more enjoyable,
Facebook will be implementing a new login system that will affect all
Facebook users. These changes will offer new [...]]]></description>
			<content:encoded><![CDATA[<p>The latest Facebook and Zbot run starts with an email like this:</p>
<pre>From:     Facebook &lt;update+eikyxpuvsr@[].com&gt;
To:     &lt;&gt;
Subject:     Facebook Account Update or Facebook Update Tool

Dear Facebook user,
In an effort to make your online experience safer and more enjoyable,
Facebook will be implementing a new login system that will affect all
Facebook users. These changes will offer new features and increased
account security.
Before you are able to use the new login system, you will be required
to update your account.
Click here to update your account online now.
If you have any questions, reference our New User Guide.
Thanks,
The Facebook Team

Update your Facebook account
Update
This message was intended for &lt;&gt;.</pre>
<p>Which leads to to this login phish:</p>
<p><img class="alignnone size-full wp-image-184" title="Facbook Login Phish" src="http://www.moosoft.com/blog/wp-content/uploads/2009/11/facebook_zbot3.jpg" alt="facebook_zbot" width="584" height="370" /></p>
<p>And finally the Zbot delivery:</p>
<p><img class="alignnone size-full wp-image-185" title="Delivering the Malware" src="http://www.moosoft.com/blog/wp-content/uploads/2009/11/facebook_zbot21.jpg" alt="Delivering the Malware" width="547" height="237" /></p>
]]></content:encoded>
			<wfw:commentRss>http://www.moosoft.com/blog/2009/11/26/facbook-and-zbot-again/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Facebook Clickjacking</title>
		<link>http://www.moosoft.com/blog/2009/11/22/facebook-clickjacking/</link>
		<comments>http://www.moosoft.com/blog/2009/11/22/facebook-clickjacking/#comments</comments>
		<pubDate>Sun, 22 Nov 2009 23:01:23 +0000</pubDate>
		<dc:creator>moosoft</dc:creator>
				<category><![CDATA[facebook]]></category>

		<guid isPermaLink="false">http://www.moosoft.com/blog/?p=143</guid>
		<description><![CDATA[
The latest attack on Facebook is a clickjacking that will share the website on your Facebook page.  Do not click the button!  You can avoid clickjacking in Firefox by using the noscript plugin.
The text reads &#8220;Want 2 C Something Hot?  Click da&#8217;button, baby!&#8221;
]]></description>
			<content:encoded><![CDATA[<p><img class="alignleft size-thumbnail wp-image-145" title="facebook clickjack" src="http://www.moosoft.com/blog/wp-content/uploads/2009/11/facebook-clickjack1-150x150.jpg" alt="facebook clickjack" width="150" height="150" /></p>
<p>The latest attack on Facebook is a clickjacking that will share the website on your Facebook page.  Do not click the button!  You can avoid clickjacking in <a href="http://www.mozilla.com/en-US/products/download.html?product=firefox-3.5.5&amp;os=win&amp;lang=en-US" target="_blank">Firefox</a> by using the <a href="http://noscript.net/" target="_blank">noscript</a> plugin.</p>
<p>The text reads &#8220;Want 2 C Something Hot?  Click da&#8217;button, baby!&#8221;</p>
]]></content:encoded>
			<wfw:commentRss>http://www.moosoft.com/blog/2009/11/22/facebook-clickjacking/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Facebook spammer ordered to pay $711 million</title>
		<link>http://www.moosoft.com/blog/2009/11/02/facebook-spammer-ordered-to-pay-711-million/</link>
		<comments>http://www.moosoft.com/blog/2009/11/02/facebook-spammer-ordered-to-pay-711-million/#comments</comments>
		<pubDate>Mon, 02 Nov 2009 23:49:18 +0000</pubDate>
		<dc:creator>moosoft</dc:creator>
				<category><![CDATA[facebook]]></category>
		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://www.moosoft.com/blog/?p=85</guid>
		<description><![CDATA[The social networking site wins damages against noted spammer Sanford Wallace for bombarding its users with junk mail.
Facebook is increasingly the target of spam and malware.  It is good to see the spammers being reigned in and we can hope this sends a message!
See more here
]]></description>
			<content:encoded><![CDATA[<blockquote><p>The social networking site wins damages against noted spammer Sanford Wallace for bombarding its users with junk mail.</p></blockquote>
<p>Facebook is increasingly the target of spam and malware.  It is good to see the spammers being reigned in and we can hope this sends a message!</p>
<p>See more <a title="CNN" href="http://money.cnn.com/2009/10/30/technology/facebook_spammer/index.htm?postversion=2009103017" target="_blank">here</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.moosoft.com/blog/2009/11/02/facebook-spammer-ordered-to-pay-711-million/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Facebook spam comes with malware</title>
		<link>http://www.moosoft.com/blog/2009/10/30/facebook-spam-comes-with-malware/</link>
		<comments>http://www.moosoft.com/blog/2009/10/30/facebook-spam-comes-with-malware/#comments</comments>
		<pubDate>Fri, 30 Oct 2009 16:27:17 +0000</pubDate>
		<dc:creator>moosoft</dc:creator>
				<category><![CDATA[facebook]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[the cleaner]]></category>

		<guid isPermaLink="false">http://www.moosoft.com/blog/?p=61</guid>
		<description><![CDATA[A botnet is now targeting Facebook with an email  message that reads:

Facebook Password Reset Confirmation.
Hey ,
Because of the measures taken to provide safety to our clients, your
password has been changed.
You can find your new password in attached document.
Thanks,
The Facebook Team
Attached is a zip file with an .exe file.  This file is the Bredolab trojan.
If you [...]]]></description>
			<content:encoded><![CDATA[<p>A botnet is now targeting Facebook with an email  message that reads:</p>
<blockquote>
<h2>Facebook Password Reset Confirmation.</h2>
<p>Hey ,</p>
<p>Because of the measures taken to provide safety to our clients, your</p>
<p>password has been changed.</p>
<p>You can find your new password in attached document.</p>
<p>Thanks,</p>
<p>The Facebook Team</p></blockquote>
<p>Attached is a zip file with an .exe file.  This file is the Bredolab trojan.</p>
<p>If you get this email delete it immediately.</p>
<p><a title="The Cleaner 2010" href="http://www.moosoft.com" target="_blank">The Cleaner 2010</a> users are protected from this with the latest database update.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.moosoft.com/blog/2009/10/30/facebook-spam-comes-with-malware/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Facebook phish and Zbot malware</title>
		<link>http://www.moosoft.com/blog/2009/10/28/facebook-phish-and-zbot-malware/</link>
		<comments>http://www.moosoft.com/blog/2009/10/28/facebook-phish-and-zbot-malware/#comments</comments>
		<pubDate>Wed, 28 Oct 2009 18:51:46 +0000</pubDate>
		<dc:creator>moosoft</dc:creator>
				<category><![CDATA[facebook]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[phish]]></category>
		<category><![CDATA[the cleaner]]></category>
		<category><![CDATA[zbot]]></category>

		<guid isPermaLink="false">http://www.moosoft.com/blog/?p=48</guid>
		<description><![CDATA[Watch out for emails with the subject &#8220;Facebook account update&#8221;, it&#8217;s a scam!  Once they have stolen your Facebook id the next step is getting you download updatetool.exe
The body of email looks like this:
In an effort to make your online experience safer and more enjoyable, Facebook will be implementing a new login system that will [...]]]></description>
			<content:encoded><![CDATA[<p>Watch out for emails with the subject &#8220;Facebook account update&#8221;, it&#8217;s a scam!  Once they have stolen your Facebook id the next step is getting you download updatetool.exe</p>
<p>The body of email looks like this:</p>
<blockquote><p>In an effort to make your online experience safer and more enjoyable, Facebook will be implementing a new login system that will affect all Facebook users. These changes will offer new features and increased account security.</p>
<p>Before you are able to use the new login system, you will be required to update your account.</p>
<p>Click (here) to update your account online now.</p>
<p>If you have any questions, reference our New User Guide</p>
<p>Thanks,<br />
The Facebook Team</p></blockquote>
<p>See more at <a href="http://garwarner.blogspot.com/2009/10/facebook-phish-users-beware.html" target="_blank">http://garwarner.blogspot.com/2009/10/facebook-phish-users-beware.html</a></p>
<p><a title="MooSoft Development" href="http://www.moosoft.com" target="_blank">The Cleaner 2010</a> users are protected from this with the latest database update.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.moosoft.com/blog/2009/10/28/facebook-phish-and-zbot-malware/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
