Today, I received a couple unsolicited messages. Using disguised fonts, the sender is named “Ŧȧcėbook Sėcuṛiƚy”. The intent appears to be an attempt to make readers think that the sender is an official entity from Facebook. The message title is cleverly and carefully worded to read:
FINAL WARNING..!! Secure Your Account Facebook Security 2011™ !!!
The profile refers back to a page that you have to “friend”; just like you would for any personal account. The picture mimics the picture of the legitimate page at http://www.facebook.com/security.
Since the sender went as far as to put a “TM” in the name “Facebook Security 2011”, the belief is that there is some sort of product/service that the sender is offering. The name reminds me of a number of fake security/anti-virus programs out there. This product “begins” by downloading a Facebook application, which most likely will want access to your profile.
As always, caution is strongly encouraged when allowing applications access to your Facebook account/profile. If you have already allowed this application, I suggest changing your Facebook password now.
Here is a copy of the message. The URL to the application was edited out:
OSG: Bits, Bytes and Packets 