Bogus Facebook photo notification carries malware

A new Facebook-themed spam campaign is targeting the social network’s users, trying to trick them into opening the attached file:

“The attached ZIP file has the name New-Photo-with-You_on_Facebook_PHOTOID13O8WHZL.zip and contains the 77 kB large file New_Photo_with_You_on_Facebook.gif.exe,” warn MX Lab researchers.

The file is currently detected as malicious by 20 of the 43 AV solutions used by VirusTotal, although they can’t seem to agree on just what kind of Trojan it actually is. Still, if there’s one thing you can be sure of is the fact that the file is definitely bad news.

Users are advised to always be extra careful when viewing notifications seemingly coming from social networks. In this case, the spoofed “Facebook