Facebook app pages serving up Javascript and acai berry spam
It's taken a while for hackers to figure out how, but it seems that Facebook's on-system apps have finally been subverted to generate spam within the social networking platform. The move also signals the potential for outbound spam from Facebook on to the internet.
Reporting on this nasty turn of events, Christopher Boyd, a security researcher with Sunbelt Software says that the first Facebook app spam is the result of hackings subverting Javascript on the social networking system.
These, he says, can now spam acai berry diet pages onto Facebook users' profile walls. Simply visiting these pages while logged in, he adds, is enough to post spam, with most of the pages involved promising a viewable video. In his analysis of the fraudster's code, Boyd says that, if you try to navigate away from the app page, a message will pop up claiming you are about to "corrupt the Flash install".
