Facebook Makeover Scam Offers To Turn Profile Colors Red, Black Or Pink

PHOTOS: Beware The Latest Facebook Scam
|

Just weeks after programmers discovered a Facebook scam had lifted 45,000 user logins and passwords from the social networking site, security blogs are warning users of a new scam that offers to turn profile backgrounds to red, black or pink.

Antivirus software company Sophos posted a description of the scam to its security blog, explaining that it works by asking users to click a succession of links, including an survey hosted outside of Facebook, promising to eventually allow them to change their Facebook profile backgrounds to a different hue.

"Predictably, the point of all of this sharing is to drive more traffic to the scammers' link where an online survey will pop-up," Graham Cluley wrote for Sophos. "The more people who take the survey, the more commission that the scammers will earn."

According to Cluley, the scam employs the same tricky maneuvers that many previous scams have used to spread viruses far and wide, namely, instructions to share links with Facebook friends and leave comments.

Luckily, the Facebook color scam doesn't ask users to input any personal information, MSNBC reports. Still, users who have already clicked the link should remove related posts from the profiles to prevent it from spreading.

Scrubbing You Facebook Profile: What To Do If You've Been Scammed(CLONED)
Change Your Password(01 of09)
Open Image Modal
If you fell victim to a phishing scheme or another hack attack, it's likely that someone else has obtained your password and is using it to access your account. You'll need to change your login credentials ASAP. Visit Facebook's Account Settings to do this. Remember, don't reuse passwords on different accounts and the more complex the password, the safer you'll be. (credit:Flickr: .::E1ement2048::.)
Verify Identity(02 of09)
Open Image Modal
If you believe someone has gained access to your Facebook profile and is posting unauthorized content in your name, Facebook's Roadblock tool can help verify your identity and secure your account against the spammer. (credit:Facebook)
Enable Login Approvals(03 of09)
Open Image Modal
One of Facebook's new security features will implement a two-step login process the first time your account is accessed from an unfamiliar device. If you enable this feature, Facebook will send a verification text to your mobile device before allowing access from the new location. You can save or block the new device via your handset. If a foreign device fails to log in, Facebook will notify you when you next log in from one of your approved devices and will give you the option of resetting your password if you suspect foul play. (credit:Facebook)
Clean Out Your Apps(04 of09)
Open Image Modal
When you approve a normal app, you "allow" the app access to your profile, trusting that the developers will post only updates about your in-app activities. However, spammers will use this open door to take over your profile. If you fell for a rogue app and mistakenly clicked "Allow," or if you notice excessive activity on your account, you should edit your list of apps and remove any suspicious ones. To do this, open the drop-down box under your Account tab, click "Privacy Settings" and find the "Apps and Websites" settings management tool (at the bottom of the page). This tool will help you manage your apps and the kind of information they can access. Your Apps Page lets you turn off all platform apps or remove/edit each app individually. It's a good idea to use this tool every now and again, since apps tend to pile up over time. (credit:Facebook)
Delete Spam Messages And Posts(05 of09)
Open Image Modal
As soon as you can, delete spammy posts from your wall and Facebook inbox. The fewer there are, the less likely you or your friends will be to click on them. (credit:YouTube)
Edit Your Interests(06 of09)
Open Image Modal
If you were tricked into "Liking" a scam, you'll need to edit your interests on your profile and remove any links to spam sites you may have acquired. (credit:Getty)
Notify Facebook(07 of09)
Open Image Modal
If you suspect your account has been compromised, you can alert Facebook through several channels. To report privacy breaches, you can direct reports to privacy@facebook.com. If a scammer gained access to your account password via phishing attack, you can fill out Facebook's phishing report. Facebook also provides a separate form for reporting a malicious link or website. (credit:Getty)
Scan Your Computer For Malware(08 of09)
Open Image Modal
Facebook recommends that you scan your computer hard drive for malicious software that could potentially tap into your profile again. If you don't have an antivirus app, Facebook suggests using a free trial of McAfee. (credit:Facebook)
End Session(09 of09)
Open Image Modal
If you've entered a line of malicious code into your browser and believe that someone has taken control of your profile and is in the process of spamming your friends, log out of Facebook to stop the attack. One of Facebook's new security features may also notify you of suspicious activity on your account, such as excessive "Likes" or posts. (credit:Getty)

Our 2024 Coverage Needs You

As Americans head to the polls in 2024, the very future of our country is at stake. At HuffPost, we believe that a free press is critical to creating well-informed voters. That's why our journalism is free for everyone, even though other newsrooms retreat behind expensive paywalls.

Our journalists will continue to cover the twists and turns during this historic presidential election. With your help, we'll bring you hard-hitting investigations, well-researched analysis and timely takes you can't find elsewhere. Reporting in this current political climate is a responsibility we do not take lightly, and we thank you for your support.

to keep our news free for all.

Support HuffPost

Before You Go