Thursday, March 25, 2010

Facebook Scam keeps reappearing

As a followup to the last post, here is the text to a Facebook scam email that was sent from somewhere in Asia from this IP address:
123.236.12.47
------------------
Dear user of facebook,

Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
Your Facebook.
------------------

And they include a zip file that they hope you'll open. Opening it runs a program that trieds to contact the server of the malware writers so that your system can become a slave to do whatever they wish. The program may or may not try to steal the credentials on your system possibly giving them access to your bank.



1 comment:

Kristen said...

This is a great article, and a great topic to explore. Thanks for sharing.