Share

Related Links

Related Stories

  • Facebook users connect from work – but avoid the boss
    Despite all the security issues, research just released claims to show that a sizeable majority of Facebook users access their social networking site from work but – interestingly – they do so when their managers are not looking.
  • Granular firewall environment needed for Facebook and Twitter
    One of the least-reported areas of IT security in recent times is the topic of firewalls but, according to Gabi Reish, head of network security with Check Point, the technology is now into its fifth generation, largely as a result of the rise of the internet.
  • Facebook to change its privacy policy again
    Reports are coming in that social networking giant Facebook is proposing a change to its privacy policy. And in true social networking style, users seem apathetic to the changes, despite their importance, says Sophos, the IT security vendor.
  • Facebook and Twitter: weak passwords and insecure users are the cause of security issues
    Officials with Facebook and Twitter gave their views at the South West Interactive (SXSWi) event in Austin, Texas, earlier this month and – surprisingly – panel members were reportedly less than apologetic for the security scares that social networking portals have generated in recent months.
  • Facebook hit by fake virus alert
    Another fake virus alert has reportedly hit users of the Facebook social networking site. According to PandaLabs, the malware research arm of Panda Security, a "massive propagation" has been seen in the last 24 hours for what is another attempt to infect Facebook users with fake antivirus programs.

Top 5 Stories

News

Cybercriminals trading in large volumes of Facebook accounts, say researchers

05 May 2010

Cybercriminals are selling fake and stolen accounts on social networking site Facebook in bulk in the underground economy, according to security researchers.

Criminals typically use Facebook accounts to send spam, send links to malicious software and to commit fraud.

Facebook accounts contain personal information that can be used to commit fraud. Facebook is attractive to fraudsters because of the high level of trust in the site.

In February alone, a hacker using the name "kirllos" tried to sell log-in credentials for 1.5m Facebook accounts through online criminal sites, VeriSign's iDefense division told The New York Times.

Kirllos has sold log-in data for about 700 000 Facebook accounts, according to iDefense estimates.

The hacker was charging $25 for 1000 Facebook accounts with 10 or fewer friends and $45 for accounts with more than 10 friends.

The inclusion of many accounts with small numbers of friends suggests the seller could have created fake accounts using an automated tool, said iDefense.

But Facebook founder Mark Zuckerberg said the social networking site has sophisticated ways to defeat fake accounts and he doubted the hacker's claim to control a large number of them.

Rapid-fire friend requests in a short timespan and a high percentage of ignored friend requests send alerts to administrators, Facebook said.

The firm also said an agent tried to buy some of the accounts on offer, but the seller was unable to come up with the goods.

This story was first published by Computer Weekly

This article is featured in:
Identity and Access Management  • Internet and Network Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.