It's turning into quite a bad weekend for Facebook with chain letters, phishing attacks and now the promise of hardcore videos being used to spread scams virally across the social network.
The following messages are currently appearing very rapidly. We've had to obscure the thumbnails as many people will find them disturbing.
Here's what the messages typically say:
[Video] - This is what Happend to his Ex GirlFriend!
[LINK]
Play Video! She could not walk properly for days!
and
Look what he did after her Ex girlfriend posted on his wall
[LINK]
lol What true pain both are having at this moment.?
Of course, there are people out there who find such links too tempting to resist. Here's what they'll see when they click on the link.
It's the latest in a series of Facebook scams which ask you to click on the word "Jaa".
The victims probably don't realise that "Jaa" is Finnish for "Share", and they're helping the scam spread to their online Facebook friends. Typically such scams end up with you being taken to an online survey that will earn the scammer money.
Can I respectfully suggest that if you keep falling for scams like this, you try and get your kicks elsewhere on the internet? There's plenty of photos and videos of naked ladies out on the web which you can peruse at your leisure, without the risk of flooding the newsfeeds of your Facebook friends.
I've informed Facebook Security about this latest fast-spreading family of scams. Let's hope they can take swift and decisive action so their users are no longer at risk.
If you got hit by this scam, make sure you have removed the entries from your news feed (to stop them being shared amongst your friends) and check your profile has not any unwanted "Likes" under your "Likes and interests".
If you use Facebook and want to get an early warning about the latest attacks, you should join the Sophos Facebook page where we have a thriving community of over 100,000 people.
Follow @gcluley
![Password security infomerical leaves Ellen DeGeneres in disbelief.. and it will you too [VIDEO]](http://sophosnews.files.wordpress.com/2013/04/ellen-thumb.jpg?w=75&h=75&crop=1)
![Can multiple moving cursors really hide your password from spyware and peepers? [VIDEO]](http://sophosnews.files.wordpress.com/2013/03/cursors-thumb.jpg?w=75&h=75&crop=1)
![Hacked TV channels broadcast zombie apocalypse emergency alert [VIDEO]](http://sophosnews.files.wordpress.com/2013/02/zombie-thumb.jpg?w=75&h=75&crop=1)
I've pretty much just accepted Facebook is a malware and scam infested jungle at this point. Trying to convince 98% of Facebook users of this is a lost cause though. I can only assume exploitable holes are everywhere in this half baked outfits architecture at this point.
None of these scams are exploiting holes in FB security. They're exploiting the users' naive behavior. It isn't a code problem when users choose to install bad apps and share fake warnings, just like it isn't a problem with bank security if checking account is empty after you give your girlfriend/boyfriend your debit card and PIN...
Yes, the human is the weak link.
It could be argued, however, a failing in Facebook security if the scams continue for hours - and sometimes days - without being blocked.