3/22/10

Facebook Password Stealer

Here is the Facebook email stealing password virus. If you get this email, my suggestions is to delete it immediately.

Subject: Facebook Password Reset Confirmation! Customer Support

Dear user of Facebook,

Because of the measures taken to provide safety to our clients, your password has been changed. You can find your new password in attached document.

Thanks,
Your Facebook.

Instead of having a fake Facebook page to collect the victims passwords (phishing), the email is sent with a malware attachment. The malware is known as “Bredolab” which is a Trojan downloader. In the two computers I repaired today, Bredolab downloaded some rogue antivirus products. However, some sites are saying that it also downloads a password stealing trojan.

If you see it onsite, Malware Bytes seems to deal with the Trojan once you kill the main executable (at least the rogue antivirus variants). Be sure to tell your clients to change their passwords after the infection has been removed as well.

© Technibble - A Resource for Computer Technicians to start or improve their computer business
To get started with your own computer business, check out our Computer Business Kit. If you want to learn how to repair laptops, check out these narrated, high definition videos. These would pay for themselves in 1 repair job.

Facebook Password Reset Malware