|
|
According to the reports, the bogus Facebook mails can invite Trojan horses to your PC.The users get deceived if they click on the ‘Facebook Password Reset Confirmation’ mail.
Even Some users get confused by the real looking address displaying service@facebook.com. So the suspicious mails get their way into the users’ PCs.
According to the security firm MX Labs, the attachment contained the zip Facebook_Password_4cf91.zip including the file Facebook_Password_4cf91.exe having the new Facebook password. The element between the underscore and .zip are randomly chosen letters and numbers for each recipient. So on downloading the file, the new Trojan horse Bredolab executes files from the internet and breaks the firewalls using its own code.
Once it sneaks to the user's PC, Bredolab creates a bot called Pushdo, which immediately starts spamming out more of these Facebook password reset mails.
However, Facebook has said that such types of mails were not coming from the social network. The users have been advised to use the anti-malware software to heal the virus infection.
A Facebook spokesperson said, "This virus is being distributed through email, not on Facebook."
"The email is disguised as a Facebook password reset e-mail with an attachment that purportedly contains the new password, but is actually the virus. We're educating users on how to detect this through the Facebook Security Page," the company blog post added.
