Facebook Malware Spam

We spotted a spammed message that purports as a notification from Facebook. It informs users that their accounts have been blocked due to a suspicious activity. They are also required to click a link to supposedly activate their accounts. Once users clicked this URL, they are lead to a malicious site that prompts a message informing them that their antivirus has detected an activity. Users systems are then downloaded by a FAKE AV malware that pretends as Microsoft Antivirus 2013.

• TMASE Engine::
• Patrón TMASE: 9468