[...] This post was Twitted by DeathwishDuck [...]

Can you clarify if, when clicking on a rogue fucabook link, the email address on the phoney login page is pre-filled (as per the screenshot), or both email and password entries are blank?

It depends on whether you are logged into Facebook at the time you visit the link. If you are already logged in (as most will be to have received the notification, then the first login screen is bypassed completely and you are invited then simply to “Allow” the rogue app.

[...] "Birthday Invitations," "Inbox (1)," "Inbox (2)" according to a blog post by Trend Micro researcher Rik [...]

[...] look just like real activities you’re used to being notified about. Security firm Trend Micro explains: “Using an already compromised account, I loaded up the app page for the malicious app [...]

[...] look just like real activities you’re used to being notified about. Security firm Trend Micro explains: “Using an already compromised account, I loaded up the app page for the malicious app [...]

[...] look just like real activities you’re used to being notified about. Security firm Trend Micro explains: “Using an already compromised account, I loaded up the app page for the malicious app [...]

[...] look just like real activities you’re used to being notified about. Security firm Trend Micro explains: “Using an already compromised account, I loaded up the app page for the malicious app [...]

[...] look just like real activities you’re used to being notified about. Security firm Trend Micro explains: “Using an already compromised account, I loaded up the app page for the malicious app [...]

[...] "Birthday Invitations," "Inbox (1)," "Inbox (2)" according to a blog post by Trend Micro researcher Rik [...]

[...] "Birthday Invitations," "Inbox (1)," "Inbox (2)" according to a blog post by Trend Micro researcher Rik [...]

[...] Trend Micro warns us today about how spam and phishing can hit you even in the closed ecosystem of a social networking system such as Facebook. Malware abounds. And in the social network arena, just like anywhere else, “using your account to send spam” is a common thing for the bad guys to want to do. [...]

[...] look just like real activities you’re used to being notified about. Security firm Trend Micro explains: “Using an already compromised account, I loaded up the app page for the malicious app [...]

[...] look just like real activities you’re used to being notified about. Security firm Trend Micro explains: “Using an already compromised account, I loaded up the app page for the malicious app [...]

[...] look just like real activities you’re used to being notified about. Security firm Trend Micro explains: “Using an already compromised account, I loaded up the app page for the malicious app [...]

[...] look just like real activities you’re used to being notified about. Security firm Trend Micro explains: “Using an already compromised account, I loaded up the app page for the malicious app [...]

[...] look just like real activities you’re used to being notified about. Security firm Trend Micro explains: “Using an already compromised account, I loaded up the app page for the malicious app [...]

[...] look just like real activities you’re used to being notified about. Security firm Trend Micro explains: “Using an already compromised account, I loaded up the app page for the malicious app [...]

[...] After entering the credentials, users would then be redirected to Facebook itself. (The posts detailing these findings can be found at the Counter Measures blog; the initial report is here and a follow-up was posted here.) [...]

[...] Blogeintrag des Sicherheitsforschers Rik Ferguson zufolge lauten die Namen der bisher identifizierten Programme [...]

[...] Read: [Trend Micro] [...]

[...] The apps were discovered earlier this week by Trend Micro researcher Rik Ferguson, who detailed the problems in a blog post. [...]

[...] has found phishing apps running on Facebook. More rogue apps have been found and reported in another Trend blog. The apps, named Posts and Stream, sent users notifications in their Facebook profile. Click on the [...]

[...] Ferguson auf CounterMeasures, 20.08.2009 (Update) Two more rogue Facebook apps linked to Fucabook scam Fügen Sie diesen Artikel zu den folgenden Social-Bookmarking-Diensten hinzu: Diese Icons [...]

[...] Microの研究員Rik Ferguson氏のブログによると、20日に登場したアプリは「Friends」「Friends [...]

[...] “Birthday Invitations,” “Inbox (1),” “Inbox (2)” according to a blog post by Trend Micro researcher Rik Ferguson. The activity started earlier in the week with a Facebook [...]

[...] “Birthday Invitations,” “Inbox (1),” “Inbox (2)” according to a blog post by Trend Micro researcher Rik Ferguson. The activity started earlier in the week with a Facebook [...]

[...] compañía de seguridad en Internet Trend Micro alerta de la existencia de una aplicación maliciosa de la red social Facebook que está enviando [...]

[...] goods through the network. For specific details on the malicious Facebook apps themselves, check Trend Micro's post, which has been continuously updated as more malicious apps have surfaced. Be careful out [...]

[...] enkele uren later doken alweer nieuwe toepassingen op. De virusapplicaties zijn ontdekt door Rik Ferguson van Trend [...]

[...] specific details on the malicious Facebook apps themselves, check Trend Micro’s post, which has been continuously updated as more malicious apps have surfaced. Be careful out [...]

[...] specific details on the malicious Facebook apps themselves, check Trend Micro’s post, which has been continuously updated as more malicious apps have surfaced. Be careful out [...]

[...] Rik Fergusons’ Trend Micro Security Blog about the Facebook Phishing [...]

[...] Rik Fergusons’ Trend Micro Security Blog about the Facebook Phishing [...]

[...] After entering the credentials, users would then be redirected to Facebook itself. (The posts detailing these findings can be found at the Counter Measures blog; the initial report is here and a follow-up was posted here.) [...]

[...] Ferguson reported that Facebook removed the first five rogue applications he had discovered, only to have six more [...]

[...] source from: http://countermeasures.trendmicro.eu/two-more-rogue-facebook-apps-linked-to-fucabook-scam/ [...]

[...] compañía de seguridad en Internet Trend Micro alerta de la existencia de una aplicación maliciosa de la red social Facebook que está enviando [...]

[...] Rik Fergusons’ Trend Micro Security Blog about the Facebook Phishing [...]

[...] specific details on the malicious Facebook apps themselves, check Trend Micro’s post, which has been continuously updated as more malicious apps have surfaced. Be careful out [...]

[...] specific details on the malicious Facebook apps themselves, check Trend Micro’s post, which has been continuously updated as more malicious apps have surfaced. Be careful out [...]

[...] Trend Micro reports on at least eleven applications that surfaced last week. The problem down the track is the effect it may have, not on marketing, but on business itself. Facebook now allows developers to sell goods through applications they develop. Think of the damage that could be created if these applications called on credit cards or any other sensitive information, and a rogue application intercepted this data. [...]

[...] a story on Trend Micro I can only advise on thing if you are using Facebook as part of your marketing strategy – [...]

[...] Gifts,’ ‘Matching,’ ‘Pok,’ and ‘Your Photos.’ According to Trend Micro researcher Rik Ferguson, the latest apps were similar in style/functionality to earlier ones, but [...]

[...] “Birthday Invitations,” “Inbox (1),” “Inbox (2)” according to a blog post by Trend Micro researcher Rik Ferguson. The activity started earlier in the week with a Facebook [...]

[...] specific details on the malicious Facebook apps themselves, check Trend Micro’s post, which has been continuously updated as more malicious apps have surfaced. Be careful out [...]

[...] specific details on the malicious Facebook apps themselves, check Trend Micro’s post, which has been continuously updated as more malicious apps have surfaced. Be careful out [...]

[...] specific details on the malicious Facebook apps themselves, check Trend Micro’s post, which has been continuously updated as more malicious apps have surfaced. Be careful out [...]

[...] look just like real activities you’re used to being notified about. Security firm Trend Micro explains: “Using an already compromised account, I loaded up the app page for the malicious app [...]

[...] “Matching,” “Pok,” and “Your Photos,” according to an updated blog post by Trend [...]

[...] Two more rogue Facebook apps linked to Fucabook scam » CounterMeasures countermeasures.trendmicro.eu/two-more-rogue-facebook-apps-linked-to-fucabook-scam – view page – cached A Trend Micro Blog. Rik Ferguson and others blog about security related issues — From the page [...]

[...] Two more rogue Facebook apps linked to Fucabook scam [...]

[...] is reporting that, even after they found three new rogue facebook apps related to the fucabook scam and Facebook [...]

i’m far from technically literate, but am certain there is something malicious with an application that specifically is called “Send Your Friends a Cup of Coffee”… (aka: a Sunset, a Teddy Hug, a Sunrise, etc… ALL are malicious)

upon realizing some things about application removal, ie; you need to actually find them under “Never Allowed to Post” in Application Settings and then Block them; then go back to reset your Privacy Settings, as every application accepted unchecks it and allows all of your information to be sent to ALL of your friends apps (see the story by the ACLU http://www.deseretnews.com/article/705326328/ACLU-Facebook-knows-too-much.html) i realized what was happening when some would be BLOCKED but would NOT dissappear as all of the non-malicous apps did, they still remain as of today…

i took screenshots and made a photo album to show friends what was going on, and how every time you used the “Create a Gift Application” which is supposedly the platform for “Send Your Friends a _____”, there was a third party developer way down at the bottom of the page also, and when i clicked the privacy violations link, it took me OFF facebook and tried to get me to install something… i’ve reported this to Facebook and have seen others did as well, yet they’ve done nothing… i wish i’d never allowed a single application at this point, but it’s too late… i wish others would listen… i may make a website to show what is happening, where i can post the screenshots so others can understand what is going on…

couldn’t find any contact information for you Ric, so i posted this here… if you like you can email me as that is my correct email address, maybe you can make more sense of these applications, the fact that they take you off Facebook and try to install “anti-spyware” on you is worrisome but i have no idea what they are really doing… perhaps you can convince Facebook to look at these and remove them? since FB doesn’t seem to be responding to others’ reports… thanks! :)

hi again, just one final update – not sure if someone here addressed Facebook, but as of today i was able to go in under the “Never Allowed to Post” section, find all of the remaining problem apps, including the one with the malicious links and there was now a “Profile” link next to them which wasn’t there before; it allowed me to go directly to the app’s page, which previously couldn’t be done without “allowing” the app again, so this was extremely helpful

my question at this point is, why are they still there? i found it interesting that some of them which had no fans or users previously, now had hundreds of users and some fans, so i’m wondering if those links took me originally to a page that was created to look like “Send Your Friends a Cup of Coffee”(Sunrise, Good Morning, etc…)

[...] Thanks to Trend Micro for sharing us the informations. Read the rest of the entry here. [...]

[...] August, 2009 Facebook was faced with several rogue apps that were quickly dealt with, leading users to believe that they are, indeed, concerned with its [...]

[...] crime and its attendant money-making, bot recruitment and Fake AV pushing scams. Facebook has been abused by rogue Apps, designed to fool users into clicking links that reward the creator through pay-per-click affiliate [...]

[...] estas falsas aplicaciones. Un ejemplo de ello son las seis aplicaciones maliciosas detectadas por TrendMicro el año pasado: “Stream”, “Posts”, “Your Photos”, “Birthday Invitations”, “Inbox [...]

I truly enjoy this blog. It was extremely informative as well as useful. I will return to wait on upcoming articles.

I need to change my password?