Beware of Facebook Password Reset Malware

Facebook sent a warning to it’s users recently about another spoofed email going around that claims to be from Facebook and asks you to open an attachment to receive a new password.

The malware being delivered is called ‘BredoLab’.  It has been occasionally spread by spam since May of 2009.  Other agencies have discovered at least eight versions of the Facebook Bredolab malware since March 16.  The emails contains the subject: “Facebook Password Reset Confirmation Customer Support”.  The message reads: “Dear user of Facebook, Because of the measures taken to provide safety to our clients, your password has been changed.  You can find your new password in attached document.  Thanks, Your Facebook.”

More troubling is the newer versions are not being detected by a majority of Anti-Virus Services.  BredoLab is a tool that is freely available in the cybercriminal underground.  It is a software that enables cybercriminal organizations to deliver any kind of software to its victims.  Once a user’s machine is infected, it will receive regular malware updates the same way it receives software updates from the user’s security vendor.

Facebook Security warns, “If you receive this email, delete it from your inbox, and warn your friends.  Remember that Facebook will never send you a new password in an attachment”.

This “password reset” social engineering practice is nothing new and My Tech Team has taken steps to ensure it’s customers are protected from this malware.  Not a customer?  Sign Up Now to get the ultimate protection, maintenance, and support for your PC.

ABOUT MY TECH TEAM:
My Tech Team is a leading online tech support company based in the U.S, providing nationwide on demand enterprise level computer support and protection 24 hours a day and 7 days a week.

 
Would you be so kind to share this post? Use the buttons below.

You Might Also Like...

• Prevent Forgotten Passwords – Create a Password Reset Disk
• Using Facebook and Twitter Safely
• Payment request spam contains malware
• AT&T Flaw Let’s Facebook Users See Accounts
• Facebook’s Beacon Lawsuit for Privacy Violations