::Trend Micro Threat Resource Center::

02 November 2009

Trojan.Whitewell: What’s your (bot) Facebook Status Today?

I'm very sure by now, most of you Facebookers would have received some weird posts on your Walls from either your friends or your friends would have notified you that you posted something on their wall.

Here are some sample messages:
  • Thought you might want to check this out http://_fb-newss.org
  • has made $159 today working at home! go to TheBizMeet.com to see how you can start! ktq
  • For You http://_newwss2.org
  • I found a job you might be interested in news44.org
Here is a breakdown of what's happening.

If you discover that your account has been used to post weird links on your friend's Walls, you should immediately do the following:
  • Change the password of your FB account.
  • Change the password of the email account linked to your FB.
  • Get your antivirus updated with the latest virus definitions with perform a full scan.
  • If you do not have antivirus software installed on your computer, pls proceed here to download a free copy.