Phishing apps found on Facebook

By Chuck Miller

June 18, 2010 Updated Aug 21, 2009 at 12:31 PM EDT

A new round of rogue Facebook applications sends notifications that lead users to phishing sites, according to researchers at Trend Micro.The apps look innocuous, but if installed on a user's account can set off a chain of events designed to lure friends to phishing sites.“Once this application is added [to an account], it uses the image of one of your friends (because your apps can see any info that you can see) to tell you that someone has generously sent you a meaningless graphic,” Rik Ferguson, solutions architect at Trend Micro, wrote in a blog post updated Wednesday. “It also gives you options of how to respond to this dubious gift, but no button to act on those options.”Another bogus app sends out notifications about supposed comments that have been made to a user's post. Hyperlinks in the notifications lead to a phishing website prompting the victim for their login credentials to “use the full functionality” of the malicious application. If they do this, their friends in turn are spammed with bogus notifications and hyperlinks to the phishing site. Best practice: Exercise caution, obviously, when entering login credentials, being careful not to fall for lures to carefully crafted phishing sites.“Always check the URL displayed in your browser's address bar before entering any sensitive information,” Ferguson wrote. “Also check the true destination of a link before clicking it, by hovering your mouse pointer over it. If it looks suspicious, don't click it.”He suggested, too, that Facebook users review privacy settings and clear out any applications no longer used.




What are your thoughts CLICK HERE to leave us a "Your2Cents” comment.

Want to be in the know for the next weather event, the next school closing or the next big breaking news story?

TextCaster alerts from Indiana's NewsCenter are your defining source for instant information delivered right to your cell phone and email. It's free, easy and instant. Sign-Up Now!

Powered by Summit City Chevrolet



© Copyright 2014, A Granite Broadcasting Station. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

To submit a comment on this article, your email address is required. We respect your privacy and your email will not be visible to others nor will it be added to any email lists.