Facebook users hit by worm

Facebook users have been warned to watch out for a new worm that tricks users into clicking on a picture that disrupts the interface of the social network.

The worm appears in the form of a picture of a woman in a bikini, with text that reads “Want 2 C Something Hot?” Below the picture there is a red button, with text reading “Click da button, baby!”

If the button is clicked, that link and picture will then be added to a user’s “wall”, exposing the worm to other users. While the worm is currently inactive, it is suspected it could be exploited for malicious purposes.

“This worm uses what is technically known as a CSRF (Cross-site Request Forgery, also called XSRF) attack,” AVG emerging threats researcher Nick FitzGerald told ITWire.com.au.

“A sequence of iframes on the exploit page call a sequence of other pages and scripts, eventually resulting in a form submission to Facebook “as if” the victim had submitted a URL for a wall post and clicked on the “Share” button to confirm the post.”

Facebook is reportedly working on fixing the problem.