Facebook has been under attack from violent images and porn on several users' profile pages. It appears to be one of the most prolific breaches of Facebook security since it was first launched. Users have been tricked into pasting malcious code (possible clickjacking or XSS?) into their browsers which enable hackers to gain access to profiles and post images that are visible to users's friends. An example is (spideroooooo.co.cc) which takes you to a fake Facebook page which if your browser has JavaScript enabled will load up the real Facebook login page in a pop-up window after you click to play the video. This malicious script will capture your login details.
Note: If you do visit the above URL the techies among us know you should use a VM or Sandbox environment.
Author
