Facebook
Facebook has shut down several of the rogue apps but more have appeared

Facebook struggles to cope with rogue apps

New spamming applications now in double digits, according to Trend Micro

Phil Muncaster

Social networking site Facebook is being overwhelmed by rogue third-party applications designed to harvest user log-in credentials and spam 'friends' in order to drive ad revenue for the creators.

The first application was spotted on Monday by Trend Micro senior security advisor Rik Ferguson, and another five have since appeared, all following the same format and with the same intent.

Facebook managed to shut down these apps but, at the time of writing, Ferguson claimed that more had appeared, taking the total into double digits.

"The new rogue apps have slightly more credible notifications to your friends and also now feature bogus notifications to the profile owner, presumably in an effort to persuade the victim to install further apps and maximise the fraudsters' advertising returns," he wrote in a blog post.

Although the apps pose no threat to data held on a user's PC, they are breaking Facebook guidelines and can cause irritation for users as they spam the victim's 'friends'.

Ferguson warned users to be extra vigilant if they are asked to install third-party apps.

"My advice is only install applications which actually give you functionality you want. Don't install everything just because someone sends you a notification," he said.

"When you get a notification from an application, there should be written 'block' in small text underneath. If you click on this you'll never be bothered by that app again."

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Do you agree?

Further reading

Facebook

Rogue Facebook app harvests user credentials

Security experts urge caution on popular social networking site

Social networking

Workplace social network blocking jumps by a quarter

Firms taking a harder line over security and productivity concerns

Russian hackers took down Twitter

Attack may have been attempt to silence pro-Georgian blogger

Twitter starts scanning for malicious links

Micro-blogging site finally addresses malware problem

Related white papers

Related jobs

Most read stories

Most watched

Analysis and Reports

Storage-as-a-Service: Best efforts or best practice?
IDG research: IT professionals understand the fundamentals of managing and protecting data, but do not apply best practices

The seven security myths of Microsoft Windows 7
It is essential to separate myth from reality about the built-in security of Microsoft’s latest offering

Poll

VMworld 2010 poll

VMworld 2010 poll

How advanced is your firm's cloud computing strategy?

View poll results

White paper library

Attachmate

Smartstream

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you thousands of white papers, case studies and analyst reports.

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

mark hurd

Mark Hurd appointed Oracle president

Charles Phillips out as former HP chief gets job with...

Cloud computing

CIMTrek offers path to the cloud for Lotus users

Tools help migrate Notes/Domino workflows to cloud-based alternatives

ViewSonic ViewPad 7

ViewSonic ViewPad 7 video

Hands on with 7in tablet that features phone capability and...

TalkTalk

ICO warns TalkTalk over URL tracking service

Watchdog criticises ISP for failing to inform customers of trial

Primary Navigation