Sophos warns of malware video on Facebook

INSECURITY OUTFIT Sophos has warned Facebook users about a video that's being posted automatically on users' profiles, called 'the sexiest video ever'.

Writing in his blog, Graham Cluley said that thousands of Facebook users have woken up to discover messages posted on their walls, seemingly by their Facebook friends.

The messages reads "<name>, this is without doubt the sexiest video ever! :P :P :P". There is a video with the title "Candid Camera Prank [HQ]". The message has what appears to be a movie thumbnail of a woman on a bicycle wearing a short skirt, and the video's length is given as 3:17.

If you click on the thumbnail you don't view a video, but are instead taken to a Facebook application.

According to reports from users, it told them that their video player was out-of-date and urged them to download a file. Users then report that the same video was posted to their Facebook friends and acquaintances, thus spreading even further.

Cluley said that if you click on the video then you should change your passwords immediately, as the 'video' is designed to install the Hotbar adware app to generate revenue for the bad guys.

Meanwhile across town, Websense Security Labs has a video of the scam in action. µ