Facebook Wins $711 Million in Spam Case

Social networking website Facebook was awarded $711.2 million in damages relating to an anti-spam case against Internet marketer Sanford Wallace, court documents show. The site filed an anti-spamming case against Wallace in February for accessing people’s Facebook accounts without their permissio...

Facebook Photo Uploader 4 ActiveX Control Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Facebook Pho...

Unstoppable New Phishing Attacks Blanket Facebook, Twitter, Hotmail

How quaint seem the days when naïve hacker wannabes phished PayPal logons, then posted them on IRC chat channels, to try to make a few bucks — but mostly for bragging rights. That was circa 2002-2003. Fast forward to the present. At this moment, Facebook is being blanketed by two high-volume emai...

Facebook Open Redirector

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Facebook Redirection + Author : 599eme Man + Contact : [email protected] -----------------------------------------------------------------------------------...

New Koobface Campaign Spoofs Adobe's Flash Updater

The botnet masters behind the most efficient social engineering driven botnet, Koobface, launched a new campaign currently spreading across Facebook with a new template spoofing Adobe’s Flash updater embedded within a fake YouTube page. Read the full story zdnet.com/Dancho Danchev...

Facebook URL Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Facebook XSS URL String Evasion + Author : 599eme Man + Contact : [email protected] + Special Thank : Syltrox66...

Koobface, Twitter Attacks Growing More Sophisticated

GENEVA — The attacks and scams that have been affecting users of Facebook, Twitter and other popular social networking sites are continuing to evolve and improve, as the attackers learn more about their victims and refine their tactics, experts say. The poster child for these attacks has been the...

Facebook Attack: Personal Info Theft via CSRF

This video is a demonstration of an attack exploiting a vulnerability in Facebook. It is a companion video to this blog post quaji.com that describes and discusses the hack. In a nutshell, a Facebook user’s personal is stolen. The only thing he does is view a regular, legitimate forum site...

On the Twitter DDoS Attacks, Apple and Microsoft Patches

Threatpost editors Ryan Naraine and Dennis Fisher discuss the DDoS attacks against Twitter, Facebook and LiveJournal and delve into Apple’s Mac OS X patch and Microsoft’s Patch Tuesday plans. SHOW NOTES: UPDATE: Twitter Suffers DoS Attack Apple Warns of Mac Attack Risk via Image Files Microsoft...

UPDATE: Twitter Suffers DoS Attack

Twitter was the target of a sustained denial-of-service attack Thursday morning, an attack that took the site offline for several hours. Twitter’s service went down around 9 a.m. EDT and was back up around noon, while Facebook’s site also experienced problems that may have been the result of a Do...

More Privacy Controls Coming to Facebook

From The New York Times Riva Richmond Facebook launched a beta test today that foreshadows new privacy controls coming to “Publisher” – the box at the top of your home and profile pages where you add content. The changes will let you easily specify who among your friends gets to see that specific...

Facebook Scam: I'm Stranded In London. Send Money!

From DarkReading Gadi Evron Facebook users are facing a new threat, 419 scams in chat form, masquerading as friends. I know because it just happened to me think: 419 scam. An “acquaintance” sent me a message using Facebook chat that said, “Hi.” Easy enough. I replied in kind. Then she told me a...

Simplistic Facebook phishing attack seeks userIDs and passwords only

From The Last Watchdog Byron Acohido There’s power in simplicity. That’s the upshot of the phishing attack now bombarding Facebook users. Many FB’ers are receiving messages titled, simply, “Hello.” The body of the text contains a brief imperative sentence: “Check areps.at” or “Check bests.at”...

Identity thieves attack Facebook users

Identity thieves are currently launching a massive attack on Facebook techcrunch.com, using fake log-in pages to hijack usernames and passwords. The attackers are using Facebook’s mail system to send a one-line message luring users to “fbaction.net,” a site that clones the social networking site’...

Public search engines mine private Facebook details

From DarkReading Kelly Jackson Higgins Another reason to be careful what you post on Facebook: All it takes is a simple Google search, and phishers and marketers can glean a treasure trove of private information darkreading.com based on relationships among Facebook “friends,” according to new...

Microsoft teams with Facebook to halt Koobface worm

From Facebook, by Jeff Williams, Microsoft When the Koobface worm hit Facebook users last year, the company’s security team scrambled to help affected users reset their accounts and avoid new infections. But the worm has continued to crop up periodically since then, and so the anti-malware team a...

Facebook doesn't believe it's really Kevin Mitnick

In an ironic twist, Kevin Mitnick, a social engineering master who went to jail for impersonating others to get information to access computer networks without authorization, couldn’t access his own Facebook account for weeks because administrators at the social networking site didn’t believe he...

Koobface worm makes a triumphant return

A new version of the Koobface worm is making the rounds of Facebook this week, this time in the guise of an invitation to view a fake YouTube video. The link takes users to a page asking them to install an updated version of the Flash player, which is instead a piece of malware. As Brian Krebs at...

Beware these Facebook scams

Facebook and other social networks can be downright unfriendly when it comes to scam attempts. PC World‘s JR Raphael has put together five attack scenarios and information on how to protect yourself and your Facebook friends...

Details Facebook the latest high-risk XSS security vulnerability-vulnerability warning-the black bar safety net

Recently, Facebook discovered high-riskXSSto security vulnerabilities, causing its users to suffer huge threat. This article will for these vulnerabilities are published in detail. Facebook in 2 0 0 8 year 1 2 on 1 5 December 2 0 0 9 years 1 months 4 days was traced to a series of high-riskXSSa...