Facebook malware poses as Google+ invite

A rogue app that can potentially steal one's personal data on social networking site Facebook is posing as an invitation for upcoming Facebook rival Google+. The Facebook app claims to offer easy invitations to Google+, according to computer security firm Sophos' senior technology consultant Graham Cluley. "What we end up with is many thousands of people who have given a third-party application, written by persons unknown, complete access to their Facebook page. That means they can later use your Facebook account to post spam messages, distribute other money-making scams, steal your personal information, and post in your name," Cluley said in a blog post. This is the latest scam taking advantage of the high public demand for Google+ invites, although earlier scams involved duping a Facebook user to take part in a survey that grants commissions to the cybercriminal. Cluley said that many Facebook users have seen messages on their news feeds urging them to "Get Invite." Those who visit the page are "invited" to allow a third-party application to access their Facebook accounts. Users are then encouraged to "Like" the page. "Remember, you haven't seen anything yet which impresses you at this point - so why are you recommending the page to your online friends?" Cluley said. The user is then encouraged to invite as many of his or her friends as possible to sign up. "Of course, if you do send a direct invitation to your friends to sign-up for the Google+ Invite application then they may very well believe that you have checked it out for yourself, and trust your invitation. A sneaky piece of social engineering by the folks behind this third party application," Cluley said. — TJD, GMA News