Malware on the loose pretending to be a Facebook photo notification

Still reading your Facebook notification via email? Then be wary of emails claiming to be from Facebook, and saying that you have been tagged in a photograph. Because it might be that you're the next potential victim of a malware attack! According to SophosLabs, there’s a malware (Troj/JSRedir-HW) on the loose pretending to be a Facebook photo notification that can infect recipients' computers with malware. More details after the jump.

It may look like an ordinary notification telling you that someone has tagged you in photo. But take a closer look and its nifty disguise is designed to infect recipients' computers with malware.

Did you notice that the email came from notification@faceboook.com with the "from" address misspells Facebook as "Faceboook" with three "o"s. If you click on the link in the email, you are not taken immediately to the real Facebook website. Instead, your browser is taken to a website hosting some malicious iFrame script, which puts your computer at risk of infection by malware.

Source: SophosLabs

---

---