Download the new Switched app for your iPhone

Skip to Content

AOL Tech

Web, Social Networking

Fake Facebook 'Password Reset' E-Mails Hiding Malware


Facebook's good name is being leveraged for yet another brutal round of malware dispersal. The trojan, Bredolab, is being distributed via e-mails with the subject line "Facebook Password Reset Confirmation". The message generally reads:
Hey (insert username),
Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
The Facebook Team
The attachment, a .zip file, will have the name "Facebook_Password_" followed by a short sequence of random numbers and letters. Inside, there is an identically named file, except that it's an .exe (or executable) file instead of an archive. Run that file and you'll be kick-starting a torrent of malware downloads, including a fake anti-spyware program. Bredolab is able to hide by injecting its own code into existing Windows components, and by automatically shutting down if it detects another program (such as an anti-virus package) investigating its activities.

Avoiding infection with this one should be pretty simple, though. First off, if you haven't requested a reset from Facebook, you'll never receive such a message. Secondly, even if you did reset your password, Facebook wouldn't send it to you as an attachment. That being the case, Facebook_Password.zip should be setting off alarms in your head. Anyway, you should really never open attachments in e-mails that you weren't expecting, or that aren't from a trusted source.

If you can remember those three things, you should be safe. [From: Mashable and Facebook and MX Lab]

Reader Comments (Page 1 of 1)

Add your comments

Please keep your comments relevant to this blog entry. Email addresses are never displayed, but they are required to confirm your comments.

When you enter your name and email address, you'll be sent a link to confirm your comment, and a password. To leave another comment, just use that password.

To create a live link, simply type the URL (including http://) or email address and we will make it a live link for you. You can put up to 3 URLs in your comments. Line breaks and paragraphs are automatically converted — no need to use <p> or <br /> tags.

Follow Switched on Twitter

Deals of the Day

Our Writers

Thomas Houston

Editor-in-chief

RSS Feed

Leila Brillson

Managing Editor

RSS Feed

View more Writers

Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

  • Home Audio Reviews
  • Cell Phone Reviews
  • Digital Camera Reviews

    9.3 out of 10

    Canon EOS 1D Mark III
    Extremely fast, 10-megapixel continuous shooting; very low noise; highly customizable; well-designed body with weather sealing; 3-inch LCD; abundant optional accessories. Full Review

    9.0 out of 10

    Canon EOS-1Ds Mark III
    Very low noise, high quality images; 21.1 megapixels; live view shooting; pro-level build-quality and performance. Full Review

    8.9 out of 10

    Canon EOS 1Ds Mark II (body only)
    Tremendous resolution; professional body; many improvements over original EOS 1Ds; superior handling; optional wireless photo transfer. Full Review

  • Desktop Reviews

    8.9 out of 10

    Velocity Micro Edge Z30 (Intel Core i7)
    Best value among midrange gaming PCs; Velocity Micro's consistently high build quality; compact case makes few sacrifices; second graphics card slot previously uncommon at this price. Full Review

    8.4 out of 10

    Velocity Raptor Signature Edition Gaming PC
    One of the fastest PCs we've tested; a PCI Express RAID card helps media encoding performance; typically immaculate Velocity Micro assembly; strong, three-year warranty. Full Review

Featured Galleries

Lady Gaga at Monster
Lady Gaga at Polaroid
Geneva at Digital Experience
Motorola Backflip: Hands On
Hannspree at CES
Parrot AR.Drone
Chase Jarvis
Nathaniel Mellor
Mario Bros. Wii

 

Switched Desktop

Get the New Switched Desktop

Latest tech news, Switched mail, and more.

AOL Tech Network

Resources

Autoblog

DailyFinance

Download Squad

Engadget

Joystiq

Urlesque

Fanhouse Main

WalletPop

Gadling