If you think a derogatory blog about you is bad, the real reason is worse than you think.

Recently, another fake message containing a link to a malware was reportedly being spammed to friends of compromised Facebook accounts. The message looks something like this:

{Friend’s name}, have you heard about that blog that was about you?

apparently its pretty bad ;(

i think you and everyone should read it…

s{BLOCKED}b.cn/video/?about={Friend’s name}

(copy this link into address bar)

Accessing the URL contained in this message leads to the downloading of the malicious file, UPDATE.EXE. This malicious file is already detected by Trend Micro as TROJ_AGENT.ASLV. Downloading this Trojan may lead to the installation of other malware programs on the affected system, such as TROJ_DROPPER.FI.

The said malicious URL is now blocked by the Trend Micro Smart Protection Network.

We’ve already seen a number of threats targeting Facebook users just these past couple of months, like spam, worms, and phishing. Sending spam messages to your friends, such as in this case, will likely give you a bad reputation anyway, so never mind the reports of badmouthing.

As Facebook continues to grow steadily in visitor traffic, the number of malicious activities will also continue to proliferate within this social networking media. Therefore, Facebook users should also continue to be wary of messages they receive on Facebook, even if they come from your friends.