One by one, the emails came from Facebook: So-and-so has posted on your wall. As so-and-so is a relative, I stopped what I was working on, looked at my Facebook wall, and found an obvious (to me) malware attack -- a meaninglessly general hook followed by a shortened link. Uh oh. I deleted the post and emailed so-and-so, who quickly got her techie husband to fix the infected account.
Then the emails started coming from my 88-year-old father's account. Double uh-oh. I looked at his home page and discovered that the infection, unchecked, was constantly posting to all of our relative's walls.
[ Also on InfoWorld: Facebook has proposed one security solution: Require developers to have verified accounts. Will it help? | Learn how to secure your systems with Roger Grimes' Security Adviser blog and newsletter, both from InfoWorld. ]
I quickly made a Jing video about how to delete a suspicious wall post and sent it to all my relatives with Facebook accounts. That helped for about an hour.
The emails kept coming, with varying content, and so did Facebook chat attempts with similar patterns, ostensibly from my father's account -- which he wasn't using. I scoured Facebook for information on how to fix or report the infection of someone else's account. I found what I was looking for deep in the Facebook help, sent off the full information, and got back an automated and useless response:
Thank you for your report. For privacy and security reasons, we cannot provide any additional information about your friend's account at this time. Please have the account owner view the Security section of Facebook's Help Center and select the contact form that most accurately describes their situation:
- Information on Hacked Accounts: http://www.facebook.com/help.php?page=420
You should also let the account owner know that they will need to contact us from either the login email address associated with their account or a secondary email address they own.
The Facebook Team