Facebook: Password Reset Confirmation Email Virus

It’s amazing the lengths spammers, hackers and just down right nasty people will go through to spread a virus. There is yet another new one today, targeting users of Facebook. This one mimicks Facebooks’ Password Reset Confirmation email, and includes an attachment.

The email claims that this attachment contains your new password – but obviously does not. It contains Bredolab.

According to the Mx Lab email security firm:

“Bredolab is a trojan horse that downloads and executes files from the Internet, such as rogue anti-spyware. To bypass firewalls, it injects its own code into legitimate processes svchost.exe and explorer.exe. Bredolab contains anti-sandbox code (the trojan might quit itself when an external program investigates its actions).”

Obviously, if you did not request your Facebook password, simply delete the email. If you do ever require your password to be changed, keep in mind that no email from Facebook will ever contain an attachment – Nor will it ever contain your password.

To help save your passwords, without ever again having to remember them, we highly recommend using RoboForm. They have a free version and you will wonder how you ever lived without it once you start using it.

Keep your machines safe and clean! Click the Facebook Share button below to let your friends know too