Facbook Exploit Claims Free PizzaHut Pizza

*DO NOT AUTHORIZE ANY OF THE APPLICATIONS OR LINKS YOU FIND IN THIS POST*

There seems to be an exploit going around Facebook. I would say that it's the closest thing to an actual Facebook "virus" I have come across.

The exploits creations can be found by searching or following this link:http://www.facebook.com/search.php?q=Free%20Pizza%20During&type=events&init=srp

You may have already received an invitation from an unknowing friend that just wanted some free pizza. Who doesn't. There seems to be hundreds of these fake events already popping up.

They follow this format:

The Event invitation links you to many variations of a page that implements Facebook Connect, they each appear to have a different app link but all allow the App to access your personal information as well as MANAGE PAGES and EVENTS. This is very unusual and suspect as it allows the App to create and automatically authorize Pages and Events without notifying you.

It was too much trouble to try and report all of the issues, neither Facebook nor PizzaHut had an easy means to notify them so all I can do is send this out for anyone searching.

Comments

[Jill Guess]

Stratt, what about regular Facebook apps that request access to your public personal data? I never allow these, are they an issue?

[Strat Parrott]

Jill, just be sure to see what permissions you are giving the application. When you install or accept the invitation you should see an overview of what they want much like the last image in the post.