Analysis by: Christopher Talampas

 URL BLOCKING DATE/TIME: 15 May 2012 10:30:00 AM GMT-8
 RATING: HIGH
 DOMAIN: who-views-facebook-profile.com
 CATEGORY: Disease Vector
 DESCRIPTION:

A malicious URL that supposedly allows users to know who viewed their profiles in Facebook is spotted in the wild. The URL, {BLOCKED}ws-facebook-profile.com looks like the legitimate Facebook page. When users clicked the login link, it displays a page informing users to continue downloading a supposedly chrome extension for them (users) to know who viewed their profiles. The said file is in actual a malware. It also prompts a notification informing users that the said file can access their data in all websites.

Trend Micro protects users against this threat via the Trend Micro Smart Protection Network that blocks the said URL.