Facebook User’s Walls Under Attack from Nasty Worm

The Facebook becomes more popular, the more dangerous it becomes to use. As if you did not already have to be wary of Facebook's emails, now a worm is spreading via Facebook user's walls. According to anti-virus maker AVG, the worm spreads when users click on a provocative photo that is being placed must infect Dusters walls. By clicking on that image, then users are opening themselves up to attack.

Below is an explanation of how nasty this works according to one of AVG's bloggers:

"For those Unfamiliar with Facebook (is there anyone other than me in that set?) The thumbnail of the worm's infective page is a link to the page. The worm's objective, of course, is that others viewing the victim's wall will click on the link, and as they are logged into Facebook, the worm will propagate its link to that victim's wall, and so on ...

This worm uses what is technically known as a CSRF (Cross-site Request Forgery, also called XSRF) attack. A sequence of iframes on the page Exploit call a sequence of other pages and scripts, eventually resulting in a form submission to Facebook "as if" the victim had submitted a URL for a wall post and clicked on the "Share" button Thurs confirm the post. "