Security Alert: Facebook Password Reset Confirmation Email Contains Virus

Yesterday a colleague of mine forwarded me an email that she had got in the name of another colleague. The title of the email was “Facebook Password Reset Confirmation”. The reply-to address was given as service@facebook.com which was a little strange because whenever I get a mail from facebook, the domain is always facebookmail.com. I got suspicious and decided to investigate the issue.

Upon looking into the mail closely, there was an attachment named Facebook_Password_3eb0e.zip. To this point I was sure that this was a virus or something. I uploaded the attachment to virustotal.com which is a service which scans the file through all major antivirus systems. You can see the results by going to the following link:

Virus Total Results For Facebook Virus

You can see that most of the antivirus systems have identified the Facebook_Password_3eb0e.zip file as a trojan.

So what does this trojan do? Upon opening and running Facebook_Password_3eb0e.zip, it will call rogue anti spywares and will inject its own code in legitimate Windows processes like svchost.exe. And a lot of other things things to infect the system fully.

And how did it manage to send it from my friend’s facebook account? Most probably, your friend’s account has been compromised. Facebook is aware of the situation and advises to change the password of your facebook account immediately if it has been sent from your account or if it is from your friend’s account, ask them to change their passwords immediately and scan their computers with an up to date antivirus.

For further reading about this issue, please follow:

Facebook Security Advice

CNET News

M86 Security


Posted

in

,

by

Comments

137 responses to “Security Alert: Facebook Password Reset Confirmation Email Contains Virus”

  1. Agus sutikno

    Bel kenapa gue tak berani macem2 karena gue ini manusia biasa yg punya rasa sakit,sedih.dll dan jga blh mti tau

  2. Tilahun Anemut

    Tilahun

  3. Sherene Frazer

    I’m having a problem resetting my password and creating a new one. I received confirmation in my e-mail. Please help???

  4. Mildred-Jerry Malone

    My facebook problem log in again
    Password number smiley
    Confirmation code
    140262991
    Sms number 32665
    Grrrr I am tired of my facebook problemlog in again why? From Deaf Mildred-Jerry Malone

  5. veriantosingobarong

    KNAPA AKUN SAYA DIBLOKIR

  6. sumit kumar

    sumitkavita828%40gmail.com

  7. Praveen

    PfVtYJpuj

  8. ???? ???

    uYhYfgqkz

  9. Petar

    Password Reset Confirmation Code:

  10. maruf

    aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn

  11. David Huff

    My confirmation code is PxAFQtUMK

  12. Facebook Codes

    Nice Post, Thanks lot For You
    ………………………..

  13. ???? ???????

    forget my password

  14. emmanuel umoh

    i can’t access my account.

  15. david jan

    i forgot my password iwant to change my password but i dont know the password

    1. Sanix

      @david jan
      You can go to the following URL, fill in the form and submit it for recovering your password:
      https://www.facebook.com/recover.php

  16. david jan

    i forgot my password

  17. mohd zeesha

    plz resset my facebook cpassword my confirmation code is CusXMYYKW

  18. ojan boedak bezzet

    ojan boedak bezzet

  19. dorothyconley

    please, reset my facebook password.

  20. bonginkosi

    Can’t recover my password

  21. sani mohammed

    pls i try to open my face book, for several time but i can’t open it. I dont u why…

  22. mafika

    I register with facebook but I can not log in and my email is unknown what must I do?

  23. Patricia De La Combe

    I am having trouble signing in to face book fot about two weeks now.This something.I have never had anything this to hppen before.I have done everything that you told me to do.Please help me.

  24. Patricia De La Combe

    my access code is DuRFaaBXW&id.

  25. Esthella Palmer

    I find it difficult to reset my password. I forgot my password

  26. chiyedza makamba

    forget my password

  27. sarmad majeed

    please reset my password

  28. chinonso

    I forget my password

  29. olaide mojeed

    My younger entered wrong password

  30. yanik

    reset my password pls

  31. mario robertsio

    I forgot my password and i tried resetting it and could not log back in.

  32. cheryl lee

    Please help me reset my password, I’ve tried couple of time now I need your assistance. thank you in advance.

  33. Maphe ozo

    Unfinishing on my facebook

  34. freddy kambizi

    notification frm facebook saying one step to complete yo sign up plz help

  35. h

    update email to valid one

  36. ameer

    plece open

  37. nhyku navia

    how to reset my password

  38. christina sanders

    CANT LOGIN OR REST MY PASSWORD

  39. babalwa

    ive got the reset password code with me and i dnt knw how to reset it nw

  40. Jose Gabriel A. LLamzon

    please sent me my password reset code, because i cannot open my fb account……..

  41. Sirabuluri Peter Mamza

    I can not acces my facebook

  42. Sirabuluri Peter Mamza

    Can acces my facebook.

  43. Sirabuluri Peter Mamza

    can’t acces my facebook

  44. Sirabuluri Peter Mamza

    hope i can acces my facebook now that i have changed my e-mail address

  45. Ibiloye Bolade

    I deactivated my acount with my email bt i have changed my email address and a comfirmation as been sent there please help me out!!!

  46. daniel kenndey

    i forgot my password for facebook

  47. saajan shrestha

    i have forgotten my facebook password

  48. angel zuniah carrota

    i lost my phone and my resert password is being sent to my phone,i want it to be sent to my email

  49. sameer

    plz confirm my facebook acount

  50. jusue

    panu mang hack ng account sa facebook?