Facebook Disables Rogue Apps, But More Turn Up

[engine]

Facebook Disables Rogue Apps, But More Turn Up [news.cnet.com]

Facebook on Thursday said it had disabled six rogue apps that were stealing Facebook users' log-in credentials and spamming people, and within hours more appeared.

Five more of the apps appeared on Thursday, called "Friends," "Friends Gifts," "Matching," "Pok," and "Your Photos," according to an updated blog post by Trend Micro researcher Rik Ferguson.

[rogerd]

I don't think there's any way to really stamp these out. People are amazingly gullible, and if they are presented with what looks like a cool app for Twitter, Facebook, etc., they will gladly offer their login credentials.

Perhaps some algorithmic monitoring of account activity might let the services detect hacked accounts more quickly and suspend them while they are investigated. Presumably, hacked accounts are used to start spamming or distributing malware links, a behavioral shift that might be detectable.