A new Facebook scam, allegedly offering users naked videos of their friends, has been reportedly distributing malware infecting two million people, an anti-malware company has revealed.
Romanian anti-malware company Bitdefender said that the scam, spreading malware called Trojan.FakeFlash.A, first appears as an advertisement on Facebook pages with a title such as "[Friend's name]'s private video " or "[friend's name]'s naked video," along with that user's photo.
Clicking on the link leads users to a fake YouTube page, complete with an age confirmation page, which is easy to bypass, and reaching the actual video prompts the user that Adobe Flash Player has crashed and needs to be re-installed, Fox News reports.
The malicious YouTube page attempts to infect the browser with a drive-by download as soon as the user lands on it.
The malware installs itself as a browser extension, accessing the user's Facebook photos and then repeats the infection process for other users.
Bitdefender said that the Trojan scam has appeared in the wild only recently, but it's already hit several countries, including the US, the report added.