.
/v3-uk/news/1982295/security-concerns-rogue-facebook-app
09 Aug 2010, Phil Muncaster , V3
Security experts are warning of yet another rogue Facebook application that could give hackers access to compromised accounts.
Sophos senior technology consultant Graham Cluley said in a blog post that the application is being spread thanks to a 'shocking video' message which reads: 'OMG the worlds worst mcdonalds customer (shocking video must see).'
Clicking on the bit.ly link takes the user to a Facebook application called 'Worst McD's Customer' which asks permission to post to the user's wall, access their data at any time, access their contact information and their list of friends, Cluley explained.
"If you're sensible you'll pull out at this point and not grant the application permission to access your data," he wrote.
"But sadly plenty of people are keen to see the 'shocking video' and will hand over control to the rogue Facebook app which promptly posts the link as a status update to your Facebook wall thus perpetuating the cycle."
Cluley recommended that victims remove the references to the link from the newsfeed, delete their status message and make sure that the application can no longer access their account.
"Just imagine what cyber criminals could do if they had access to your profile," he added.
Cluley updated his Twitter feed shortly after to say bit.ly has now shut down the link, although Sophos is still awaiting a response from Facebook.
"It's almost certain that it will pop up again before too long with a slightly different name," he said of the scam.
Security vendor F-Secure released a handy guide last week on how to stay safe on Facebook.
Do you agree?
Numerous Versions
This App and many others like it have been doing the rounds on Facebook for a few weeks now. I have reported these to Facebook and hidden them from my wall when I can but it is not always possible to do this. Facebook must have been aware of these going round all over the place. These apps come up as different names as well, so I guess that as soon as it is deleted by Facebook Admin it pops up again under a different name.
Posted by Andrew, 09 Aug 2010