HACKER CLUB 4 U: Beware New Picture Worm Hits Facebook Today

Facebook has acquired Face.com! Our mission is and has always been to find new and exciting ways to make face recognition a fun, engaging part of people’s lives, and incorporate remarkable technology into everyday consumer products. If you’re anything like us, Facebook is a part of your life every single day. We keep up with our friends and family, share interesting (or mundane) experiences from our daily lives, and perhaps most importantly for us, we share a LOT of photos.

We love building products, and like our friends at Facebook, we think that mobile is a critical part of people’s lives as they both create and consume content, and share contentwith their social graph. By working with Facebook directly, and joining their team, we’ll have more opportunities to build amazing products that will be employed by consumers – that’s all we’ve ever wanted to do. :)

Now, lots of developers use Face.com technology to power various apps and make wonderful products. We love you guys, and the plan is to continue to support our developer community. If there are new developments you can expect to hear from us here, on the developer blog, and through our developer newsletter.
Thank you to all of our supporters, our amazing dev community, to our employees and to our friends and family who have seen us through many long days and longer nights. The next steps are going to be exciting for all of us.

From last few months, Facebook has been widely targeted for scam and spreading malware, One of the those spreading worm I discovered recently was when I was chatting with my friend, The following message from the sudden appeared.

hehehI!!! lool http://tinyurl.com/Wooo-2841-jpg

From the above screenshot, you can clearly see that tinyurl has been used to shorten the URL, One more thing to note is that it's not an image file as image files end with .JPG extension then -jpg.

The above screenshot describes a more clear picture of what you are going to download along with the JPG file. The exe is basically a Zeus Trojan, Zeus is one of the most popular botnets used for stealing sensitive information such as passwords, credit card numbers. One of it's popular feature is an Anti VM and Anti Sandbox capability, Making it useless for testing it inside virtual environments.

A scan at Virus total shows that only 3/18 URL scanners were able to detect it as a malware site, Rest of them failed.