Facebook logoMatt Rourke/AP/Press Association Images

The experts are warning about a Facebook scam, where users are sent an email telling them they have been tagged in a photo on Facebook. However, when they open the email they discover they have been the victim of scam, and there's every chance they have picked up a virus in the process.

So what do you need to watch for?

The scam

Experts at SophosLabs have raised the alarm about a growing tide of these spam emails. They claim to come from Facebook, but the email will be slightly different from a real Facebook alert. So, for example, one of these spam emails comes from Faceboook (with three os). It will tell you that someone has tagged a photo of you on Facebook, and provide you with a link to have a look at the snap.


If you make the mistake of clicking on it, you won't be taken directly to Facebook, instead you will be directed to a website which contains malware which will try to infect your computer. It will hover on that site for about four seconds, before sending you on to a random Facebook page. By that stage it is likely to be too late - and you will have picked up the virus.

This isn't the first time this scam has done the rounds. There were previous incarnations back in 2011 and 2010. However, the activities have been stepped up again, so it pays to be on your guard.

Protect yourself

Graham Cluley, Senior Technology Consultant at Sophos, says there are a few things that should alert you to the fact this email is bogus. In the first place, there will be something wrong with the email claiming to be from Facebook. And second, when you hover over the link it won't indicate that it's going to take you to Facebook - but will show the details of the site hosting the virus.

His advice, therefore is to be very careful when you receive an email saying you have been tagged, to check for these things, and to ensure you have updated your virus software to ensure attacks like this are blocked. He says: ""If you don't take the right steps to protect your computer, one day a cybercriminal might find the right social engineering trick to dupe you into making a bad decision or visit a dangerous website."



More stories