My Facebook has been hacked. It's a Malware according to FB. Why didn't webroot catch this?
Right now the automated FB system is trying to dl Kapersky. It seems to be looping as far as I can tell. If it can't, my Facebook account with 700+ users may be kaput. This isn't your problem I guess. I didn't have a very strong password. But it wasn't my address, or birthday. It just wasn't a really strong one. Still, when I just now ran the Webroot scan, it found nothing, but there is definitely something.
Hello there, welcome to the Community!
First, let me say how sorry I am that you have had this happen. I am on Facebook pretty much non stop when the computer is on, and being a bit of a game player I have a LOT of Facebook Friends. I can't tell you how many of them have had something like this happen.
The hard part about this is that chances are there just is nothing for ANY AV to detect. A huge number of Facebook Account hacks are due to roque Facebook Apps... like the games, or calendar apps, etc. They do not install anything on your computer to be found. One that I have seen a lot recently is a post that invites you to see a video. When you click on the post, it brings you to a Facebook Sign-In page that you must fill in to access the video.
The problem is, you are ALREADY logged into Facebook... that login screen to see the video is simply a rogue app that captures whatever text is entered into the input boxes. It does not log you into anything. It is just like a page that asks you to put in your age and birthdate to continue, and it logs the information. One thing it DOES do is set your Facebook permissions to allow and use that app. It will be called something like allowing permission for that video player to run.
The result is that you just got hacked, without realizing it, with no malware on your computer at all, by giving that app your username and password. Even if you change your password information, you still have given that app permission, so it is STILL there and able to access your profile information, and post to your feed without you even knowing it.. and thusly trick your friends into getting hacked as well.
To get past the Kaspersky looping and so being able to get back into Facebook, as well as to make sure you have no infections on your computer, please Submit a Trouble Ticket and allow Webroot Support to give you a hand. There is no charge for this as Support is included with your valid Webroot license.
Once Support has you checked out and verified your computer is clean, and you can get back into Facebook, you need to do a couple of things.
1) Review ALL app that you have given permission to run and access your account. ANY that you do not recognize or no longer use, you need to delete from your Facebook profile.
2) You might want to post a notice to your Facebook friends warning them of this type of scam. It is VERY common to be hacked by rogue Facebook apps, that NO AV can catch as it involves no downloads or malware. It is nothing but a faked sign-in screen to steal your Facebook login. Facebook does NOT ask for you to login to accept a new app, you only have to click a Next or Continue button. Never provide your sign in credentials if you are already logged in.
I hope this helps, and I am sorry that this reply is so very long
First, let me say how sorry I am that you have had this happen. I am on Facebook pretty much non stop when the computer is on, and being a bit of a game player I have a LOT of Facebook Friends. I can't tell you how many of them have had something like this happen.
The hard part about this is that chances are there just is nothing for ANY AV to detect. A huge number of Facebook Account hacks are due to roque Facebook Apps... like the games, or calendar apps, etc. They do not install anything on your computer to be found. One that I have seen a lot recently is a post that invites you to see a video. When you click on the post, it brings you to a Facebook Sign-In page that you must fill in to access the video.
The problem is, you are ALREADY logged into Facebook... that login screen to see the video is simply a rogue app that captures whatever text is entered into the input boxes. It does not log you into anything. It is just like a page that asks you to put in your age and birthdate to continue, and it logs the information. One thing it DOES do is set your Facebook permissions to allow and use that app. It will be called something like allowing permission for that video player to run.
The result is that you just got hacked, without realizing it, with no malware on your computer at all, by giving that app your username and password. Even if you change your password information, you still have given that app permission, so it is STILL there and able to access your profile information, and post to your feed without you even knowing it.. and thusly trick your friends into getting hacked as well.
To get past the Kaspersky looping and so being able to get back into Facebook, as well as to make sure you have no infections on your computer, please Submit a Trouble Ticket and allow Webroot Support to give you a hand. There is no charge for this as Support is included with your valid Webroot license.
Once Support has you checked out and verified your computer is clean, and you can get back into Facebook, you need to do a couple of things.
1) Review ALL app that you have given permission to run and access your account. ANY that you do not recognize or no longer use, you need to delete from your Facebook profile.
2) You might want to post a notice to your Facebook friends warning them of this type of scam. It is VERY common to be hacked by rogue Facebook apps, that NO AV can catch as it involves no downloads or malware. It is nothing but a faked sign-in screen to steal your Facebook login. Facebook does NOT ask for you to login to accept a new app, you only have to click a Next or Continue button. Never provide your sign in credentials if you are already logged in.
I hope this helps, and I am sorry that this reply is so very long
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.