ALERT: Third Scam Today Rips Across Facebook

Today's third viral spamware scam hit less than half an hour after Facebook spokespeople announced the disarming of a prior campaign.

Spammers are having a ball, with the day’s third viral scam just picking up speed as we post this. Don’t click on any posts that look like the one below unless you want to forward this spamware to all your friends on Facebook.

Word of this new scam arrived in our inbox within 20 minutes of learning that Facebook had diffused a prior spam campaign.

The URL listed in the posts takes you to a page that seeks to tap your profile information and ultimately get you to help the spammer earn a commission. A series of screens leads to the old familiar survey that promises the MacBook Air if you complete it.

Please thank me for putting my own computer security on the line in order to find out what this scam does next. I clicked on the Facebook log-in button and saw the familiar permission request window.

If you click on “allow,” another tab opens up on your browser, and you see mostly white space with the following right smack dab in the middle:

Click on the flag representing you and you get a screen almost identical to the original home page, only where the Facebook log-in was there’s a request for your zip code. By this time, the app has three different tabs opened up on my browser.

Then the site asks you what color you’d like the MacBook Air in, by popping up a color box over the area where you’d previously been asked to supply your zip code.

The next screen comes up on browser tab number three, asking you for your name, birth date, snail-mail address, phone number and email address. Plus there’s a box to click saying you agree to the terms of the promotion.

The next click leads to the survey that the spammer wants you to complete. Only when you finish the questionnaire do you learn that the exercise enters you into a drawing for the chance to win a MacAir.

How many times have you seen that survey outcome before? Readers, what do you make of the timing of these spam campaigns, back-to-back in one day? Do you think the same spammer is involved in all of them, or is there some other common affiliation?