<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Facebook Colon Cleansing spam via Mobile Web</title>
	<atom:link href="http://countermeasures.trendmicro.eu/facebook-colon-cleansing-spam-via-mobile-web/feed/" rel="self" type="application/rss+xml" />
	<link>http://countermeasures.trendmicro.eu/facebook-colon-cleansing-spam-via-mobile-web/</link>
	<description>Rik Ferguson blogs about current security issues.</description>
	<lastBuildDate>Sat, 13 Mar 2010 14:55:58 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Cris</title>
		<link>http://countermeasures.trendmicro.eu/facebook-colon-cleansing-spam-via-mobile-web/comment-page-1/#comment-3909</link>
		<dc:creator>Cris</dc:creator>
		<pubDate>Wed, 04 Nov 2009 21:37:17 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1397#comment-3909</guid>
		<description>I had a similar problem, but the message was related to making money at home.  The funny thing is that I got a text message on my iPhone at 6:30 AM yesterday morning that had the same basic text.  At around 10 am I noticed that my Facebook status said something similar.  I deleted it without thinking to look and see if I received the text message before or after the matching status update occurred.  I don&#039;t know if / how those two things are related, but it was definitely strange.  I&#039;d like to think that I&#039;m too smart to fall for a phishing scam and I don&#039;t recall logging into anything unusual on my PC.  My PC has a cookie so that I don&#039;t need to enter my Facebook username and password through Firefox, but my Internet Explorer has been acting strangely for months though.  (when I shut down my PC each night, it insists there are updates to be done).</description>
		<content:encoded><![CDATA[<p>I had a similar problem, but the message was related to making money at home.  The funny thing is that I got a text message on my iPhone at 6:30 AM yesterday morning that had the same basic text.  At around 10 am I noticed that my Facebook status said something similar.  I deleted it without thinking to look and see if I received the text message before or after the matching status update occurred.  I don&#8217;t know if / how those two things are related, but it was definitely strange.  I&#8217;d like to think that I&#8217;m too smart to fall for a phishing scam and I don&#8217;t recall logging into anything unusual on my PC.  My PC has a cookie so that I don&#8217;t need to enter my Facebook username and password through Firefox, but my Internet Explorer has been acting strangely for months though.  (when I shut down my PC each night, it insists there are updates to be done).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Facebook Status/Wall Hack Making the Rounds</title>
		<link>http://countermeasures.trendmicro.eu/facebook-colon-cleansing-spam-via-mobile-web/comment-page-1/#comment-3903</link>
		<dc:creator>Facebook Status/Wall Hack Making the Rounds</dc:creator>
		<pubDate>Tue, 27 Oct 2009 12:59:51 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1397#comment-3903</guid>
		<description>[...] users, including several of my friends, have recently been caught off-guard by strange Status updates and Wall posts, many of them related to weight-loss plans, colon-cleansing products, and other website/product [...]</description>
		<content:encoded><![CDATA[<p>[...] users, including several of my friends, have recently been caught off-guard by strange Status updates and Wall posts, many of them related to weight-loss plans, colon-cleansing products, and other website/product [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Phil</title>
		<link>http://countermeasures.trendmicro.eu/facebook-colon-cleansing-spam-via-mobile-web/comment-page-1/#comment-3871</link>
		<dc:creator>Phil</dc:creator>
		<pubDate>Mon, 12 Oct 2009 20:43:54 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1397#comment-3871</guid>
		<description>Sounds like this is related to mobile apps. Only happened since I have enabled the mobile app for my Android (Htc Magic). Not convinced that this one is user error and reckon there is some bug being exploited in Facebook apps.</description>
		<content:encoded><![CDATA[<p>Sounds like this is related to mobile apps. Only happened since I have enabled the mobile app for my Android (Htc Magic). Not convinced that this one is user error and reckon there is some bug being exploited in Facebook apps.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: annoyed</title>
		<link>http://countermeasures.trendmicro.eu/facebook-colon-cleansing-spam-via-mobile-web/comment-page-1/#comment-3846</link>
		<dc:creator>annoyed</dc:creator>
		<pubDate>Wed, 07 Oct 2009 16:24:16 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1397#comment-3846</guid>
		<description>This happened to me at 2:30am EST - I woke up to my iPhone dinging because of new emails I received. There were 10 new wall posts from myself and they were the email notifications. I then logged into FB on my Mac and roughly the first 50-100 of my friends received the same wall post. Because I was awake and didn&#039;t want my friends to click on those I proceeded to remove those wall posts from each and every one of my friends. I don&#039;t know how or when I was a victim of this phishing scam...is there something wrong with my iPhone FB app?</description>
		<content:encoded><![CDATA[<p>This happened to me at 2:30am EST &#8211; I woke up to my iPhone dinging because of new emails I received. There were 10 new wall posts from myself and they were the email notifications. I then logged into FB on my Mac and roughly the first 50-100 of my friends received the same wall post. Because I was awake and didn&#8217;t want my friends to click on those I proceeded to remove those wall posts from each and every one of my friends. I don&#8217;t know how or when I was a victim of this phishing scam&#8230;is there something wrong with my iPhone FB app?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: seperlinky</title>
		<link>http://countermeasures.trendmicro.eu/facebook-colon-cleansing-spam-via-mobile-web/comment-page-1/#comment-3845</link>
		<dc:creator>seperlinky</dc:creator>
		<pubDate>Wed, 07 Oct 2009 06:28:55 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1397#comment-3845</guid>
		<description>Now it says something like -&gt; Remember to clean your colon out :) facebookhealth4.com</description>
		<content:encoded><![CDATA[<p>Now it says something like -&gt; Remember to clean your colon out :) facebookhealth4.com</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Shadow</title>
		<link>http://countermeasures.trendmicro.eu/facebook-colon-cleansing-spam-via-mobile-web/comment-page-1/#comment-3843</link>
		<dc:creator>Shadow</dc:creator>
		<pubDate>Wed, 07 Oct 2009 06:22:44 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1397#comment-3843</guid>
		<description>Looks like it&#039;s time for Round 2...

xxx made $(variable amount) today working online! u guys have to check out WorkHomeDream.net to get started too!
24 minutes ago via Mobile Web · Comment · Like

I wonder if my friend actually changed her password...</description>
		<content:encoded><![CDATA[<p>Looks like it&#8217;s time for Round 2&#8230;</p>
<p>xxx made $(variable amount) today working online! u guys have to check out WorkHomeDream.net to get started too!<br />
24 minutes ago via Mobile Web · Comment · Like</p>
<p>I wonder if my friend actually changed her password&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Twitch2021</title>
		<link>http://countermeasures.trendmicro.eu/facebook-colon-cleansing-spam-via-mobile-web/comment-page-1/#comment-3842</link>
		<dc:creator>Twitch2021</dc:creator>
		<pubDate>Wed, 07 Oct 2009 02:59:41 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1397#comment-3842</guid>
		<description>I just wanted to mention that the Order Form image posted in this article is identical to one I&#039;ve encountered via spam on Craigslist. When responding to a personal ad spammers try to redirect respondents to a bogus website (it&#039;s different all the time) that they claim is an adult dating site and that they use it to verify that the people they&#039;re meeting aren&#039;t &quot;sexual predators&quot; or whatever. The &quot;Sign up&quot; page looks exactly like the order form above, complete with unlinked images to prove security.</description>
		<content:encoded><![CDATA[<p>I just wanted to mention that the Order Form image posted in this article is identical to one I&#8217;ve encountered via spam on Craigslist. When responding to a personal ad spammers try to redirect respondents to a bogus website (it&#8217;s different all the time) that they claim is an adult dating site and that they use it to verify that the people they&#8217;re meeting aren&#8217;t &#8220;sexual predators&#8221; or whatever. The &#8220;Sign up&#8221; page looks exactly like the order form above, complete with unlinked images to prove security.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nida</title>
		<link>http://countermeasures.trendmicro.eu/facebook-colon-cleansing-spam-via-mobile-web/comment-page-1/#comment-3841</link>
		<dc:creator>Nida</dc:creator>
		<pubDate>Tue, 06 Oct 2009 19:20:31 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1397#comment-3841</guid>
		<description>My facebook status got updated by something similar (PurgeColon.net). Changed my password, but how can we prevent this from happening again?</description>
		<content:encoded><![CDATA[<p>My facebook status got updated by something similar (PurgeColon.net). Changed my password, but how can we prevent this from happening again?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sebish</title>
		<link>http://countermeasures.trendmicro.eu/facebook-colon-cleansing-spam-via-mobile-web/comment-page-1/#comment-3839</link>
		<dc:creator>sebish</dc:creator>
		<pubDate>Mon, 05 Oct 2009 20:46:04 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1397#comment-3839</guid>
		<description>I&#039;m getting the same thing from my phone, it seem to pair up with when I installed a custom WebMo Distribution (From XDA Developers) I put on to my phone.</description>
		<content:encoded><![CDATA[<p>I&#8217;m getting the same thing from my phone, it seem to pair up with when I installed a custom WebMo Distribution (From XDA Developers) I put on to my phone.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Esau</title>
		<link>http://countermeasures.trendmicro.eu/facebook-colon-cleansing-spam-via-mobile-web/comment-page-1/#comment-3838</link>
		<dc:creator>Esau</dc:creator>
		<pubDate>Mon, 05 Oct 2009 14:03:11 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1397#comment-3838</guid>
		<description>I dunno, I use no apps in my facebook, click only friends pages &amp; still I had this happen and while I was using facebook even - after seeing the update I did change my password, both on facebook &amp; the email I used to register, then after doing that I changed the email address tied to my facebook account (created a gmail just for it) just in case.

Still, I have never done one of those silly polls, added any apps or 3rd party addons. I&#039;d like to know how they got into my account. I really only use it once or twice a week as it is, but now I am stopping by daily to see if anything has changed.</description>
		<content:encoded><![CDATA[<p>I dunno, I use no apps in my facebook, click only friends pages &amp; still I had this happen and while I was using facebook even &#8211; after seeing the update I did change my password, both on facebook &amp; the email I used to register, then after doing that I changed the email address tied to my facebook account (created a gmail just for it) just in case.</p>
<p>Still, I have never done one of those silly polls, added any apps or 3rd party addons. I&#8217;d like to know how they got into my account. I really only use it once or twice a week as it is, but now I am stopping by daily to see if anything has changed.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
