Facebook users have been warned to watch out for a worm than appears on the users interface in the form of a bikini clad woman. With a text that says " Want 2 c something hot?" With a red button below that says " Click da button, baby!"
"This worm uses what is technically known as a CSRF (Cross-site Request Forgery, also called XSRF) attack," AVG emerging threats researcher Nick FitzGerald told ITWire.com.au.
"A sequence of iframes on the exploit page call a sequence of other pages and scripts, eventually resulting in a form submission to Facebook "as if" the victim had submitted a URL for a wall post and clicked on the "Share" button to confirm the post."
Facebook is reportedly working on fixing the problem."
From AVG