Bogus Facebook notifications lead to malware


In an attempt to trick users into getting themselves infected with malware, cybercriminals are currently spamvertising millions of emails impersonating Facebook.

More details:

Sample screenshot of the spamvertised email:

Detection rate for the spamvertised attachment: Your_Friend_New_photos-updates.jpeg.exe – MD5: 8601ece8b0c79ec3d4396f07319bbff1 – detected by 36 out of 43 antivirus scanners as Win32/TrojanDownloader.Wauchos.A; Trojan-Ransom.Win32.PornoAsset.xen

Webroot SecureAnywhere users are proactively protected from this threat.

You can find more about Dancho Danchev at his LinkedIn Profile. You can also follow him on  Twitter.


  1. [...] was similar to a previously profiled spam campaign imitating Facebook. However, in this case the cybercriminals behind it relied on attached malicious archives, [...]

  2. [...] notifications themed malicious attack. During October, 2012, we intercepted two – “Bogus Facebook notifications lead to malware“; “Cybercriminals spamvertise millions of bogus Facebook notifications, serve [...]