{"id":779,"date":"2008-01-15T07:41:50","date_gmt":"2008-01-15T07:41:50","guid":{"rendered":"https:\/\/www.darknet.org.uk\/2008\/01\/the-first-reported-facebook-wormmalware-pops-up-secret-crush\/"},"modified":"2015-09-09T19:39:41","modified_gmt":"2015-09-09T11:39:41","slug":"the-first-reported-facebook-wormmalware-pops-up-secret-crush","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2008\/01\/the-first-reported-facebook-wormmalware-pops-up-secret-crush\/","title":{"rendered":"The First Reported Facebook Worm\/Malware Pops Up &#8211; Secret Crush"},"content":{"rendered":"<p>[ad]<\/p>\n<p>So facebook has finally fallen victim, after the recent <a href=\"https:\/\/www.darknet.org.uk\/2007\/12\/worm-spreading-fast-on-googles-orkut-social-network\/\">Orkut worm<\/a> now we have malware infection from Facebook, an application called Secret Crush. The application was <a href=\"http:\/\/blogs.securiteam.com\/index.php\/archives\/1058\">renamed as My Admirer<\/a> but that seems to be gone now too.<\/p>\n<blockquote><p>The first spyware spreading with Facebook application has been discovered. Security company Fortinet <a href=\"http:\/\/www.fortiguardcenter.com\/advisory\/FGA-2007-16.html\">reports<\/a> that application called Secret Crush is installing Zango (aka AdWare.Win32.180Solution) with Iframe, technically from ZangoCash.com.<\/p><\/blockquote>\n<p>It seems like Social Networks are a big target for infections now as the sheer mass of users there means that if the bad guys get a good piece of self-propagating code mixed up with a dose of social engineering they will achieve a massive infection.<\/p>\n<blockquote><p>The text included to the request entry is \u201cOne of Your Friends Might Have a Crush on You!\u201d. Additionally, the buttons are \u2018Find Out Who!\u2019 and typical \u2018Ignore\u2019. It appears that Secret Crush is not included to Facebook Application Directory (no log-in needed) any more. Reportedly FortiGuard Team has informed Facebook guys and probably the application has been disabled already.<\/p><\/blockquote>\n<p>Although the application has been disabled (Good work Facebook) it shows what can happen, and it will happen again that&#8217;s a guarantee. This is just the beginning. <\/p>\n<p><!--adsense#New468--><\/p>\n<p>Source: <a href=\"http:\/\/blogs.securiteam.com\/index.php\/archives\/1056\">Securiteam<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[ad] So facebook has finally fallen victim, after the recent Orkut worm now we have malware infection from Facebook, an application called Secret Crush. The application was renamed as My Admirer but that seems to be gone now too. The first spyware spreading with Facebook application has been discovered. Security company Fortinet reports that application [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[7,17,15],"tags":[2624,2623,1170,1602,142],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/779"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=779"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/779\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=779"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=779"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=779"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}