Virus warning: Someone tagged or added a photo of you on Facebook

Summary:Scammers are spamming a new e-mail that claims you were tagged in a photo added on the social network. The e-mail includes a link to a webpage that uses the Blackhole exploit kit to put malware onto your computer, before quietly redirecting you to a Facebook profile as if nothing was amiss.

Virus warning: Someone tagged or added a photo of you on Facebook

Scammers are sending out e-mails saying that someone has added a photo of you and tagged you in it on Facebook. The spam comes with a link that tries to install malware on your computer.

Sophos, which first spotted the attack, detects the malware as "Troj/JSRedir-HW." The security firm provided the following sample e-mail (screenshot above):

Subject: Christine McLain Gibbs tagged a photo of you on Facebook
From: Facebook <notification@faceboook.com>
Body:
Christine McLain Gibbs added a photo of you.
See Photo / Go to Notifications
If you don't want to receive these emails from Facebook in the future, please click unsubscribe.
Facebook, In. Attention: Deparmtent 415 P.O Box 10005 Palo Alto CA 94303

Notice the e-mail address: "notification@faceboook.com." Facebook is intentionally misspelled as "Faceboook" with three Os. If you click on the link in the e-mail, you are not taken to Facebook but to a website hosting a malicious iFrame script which takes advantage of the Blackhole exploit kit. To cover up what just happened, however, four seconds later your browser is taken via a META redirect to a Facebook profile of a presumably entirely innocent individual.

As a general word of caution, don't open attachments in e-mails or click on links in them unless you are absolutely certain that the sender is who you think you are. If you want to warn Facebook about this scam, feel free to contact Facebook Security.

See also:

Topics: Security, Malware

About

Emil is a freelance journalist writing for CNET and ZDNet. Over the years, he has covered the tech industry for multiple publications, including Ars Technica, Neowin, and TechSpot.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.