Social networking giant Facebook has issued a warning to users regarding a new scam that tricks users into downloading a Trojan onto their computers. The Trojan enables the cyber criminal to steal a user’s password for the social networking site.
Once that occurs, the cyber criminal is able to use the compromised account to launch spam attacks against other users. Also, the criminal can steal login credentials for other websites, such as online bank accounts, as well.
Security firm McAfee was the first to warn about the threat on their “Security Insights Blog.”
“There’s another spoofed email going around that claims to be from Facebook and asks you to open an attachment to receive a new password. This email is fake. Delete it from your inbox, and warn your friends. Remember that Facebook will never send you a new password in an attachment,” a statement of Facebook’s website said.