Facebook app installs spyware

 

Gallery

By Matthew Sparkes

Posted on 4 Jan 2008 at 13:09

Users who add a Facebook application called "Secret Crush" could also be opening their computer up to spyware, warns security firm Fortinet.

The Secret Crush application tempts users to install it by sending messages claiming that "one of your friends may have a crush on you!" Once installed, however, it prompts users to install Zango spyware, which is used to track online surfing and collect personal information.

Fortinet believes around one million Facebook users have been infected by the application, due to its insistence that they invite a further five friends before it reveals the secret crush. And as if to rub salt into the word, there's apparently no secret crush at the end of it all.

"The tremendous success and lightning fast expansion of Facebook empowered the social networking giant with an impressive user base," comments the Fortinet advisory. "Needless to say, in a digital world where web traffic equals money, such a user base attracts spammers, virus/spyware seeders, and other ethic-less online marketers like honey would attract flies."

Facebook were unavailable for comment at the time of writing.

We're out in Las Vegas this week bringing you the latest technology news and announcements from CES 2008, have a look at our coverage on our CES minisite.