Spammers exploit another Facebook flaw

Spammers have taken advantage of a vulnerability in Facebook to spread auto-replicating links, a trick that makes it possible to spread crud without using social engineering.

Simply clicking on any application spam links was enough to "share" the application to the user's wall, net security firm F-Secure explains, adding that the links had stopped working by late on Monday.

While Facebook has contained this threat, others along the same lines are likely to follow, not least because spammers have taken to web 2.0 sites as channels for crud promotion or (increasingly) to distribute survey scams.

For example, comment spam promoting a survey that supposedly offered an iPad as a prize for completion was brazenly posted to a YouTube channel maintained by Sophos earlier this week, as illustrated by a blog post here. ®