Facebook Password Reset Confirmation Email Contains Virus [ALERT]
In: web resources
27
Oct
2009

Another new virus is spreading through social networks, this time, via Facebook. This one – known as Bredolab – masks itself as a “Password Reset Confirmation Email,” appears to come from Facebook, and attaches a file that purports to contain a new password.
That file is actually a trojan horse that will download a host of nasty files from the Web and infect your computer with them. Email security firm MX Lab explains further:
“Bredolab is a trojan horse that downloads and executes files from the Internet, such as rogue anti-spyware. To bypass firewalls, it injects its own code into legitimate processes svchost.exe and explorer.exe. Bredolab contains anti-sandbox code (the trojan might quit itself when an external program investigates its actions).”
The way to avoid this one: if you didn’t request your password from Facebook, there’s no reason you should be getting a password reset confirmation email, so don’t open it. Further, even if you did, Facebook would not send your new password as an attachment. Finally, f you’re still not sure, take a look at the full details of the email – if the mail server’s don’t belong to Facebook, you know the message is not legit.
Reviews:
Facebook
Tags: facebook, security, social networking, virus


Go to Source
2 Responses to Facebook Password Reset Confirmation Email Contains Virus [ALERT]
astaireboy
February 9th, 2010 at 3:53 pm
The video is most likely way too big to send via e-mail. E-mail has a limit of 10mb (or 20mb via google now).
You can either:
1. Upload to something like YouTube and send your sister there.
2. Convert the video to a smaller file and e-mail it. This can be done with almost any video converter software or your camera may have come with software to do this.
Miles
February 16th, 2010 at 9:42 am
I am having the exact same issue today – except for that I keep getting the message that my account is unavailable for maintenance. I thought it might be a password issue so I tried to reset. I, too, got the email that says here is your reset code even though there is no code in the email anywhere. I tried again, same thing. I'm hoping it is just a temporary issue with facebook that is affecting some of the accounts.