Update your Facebook Password Forthwith! (No, seriously, go update your Facebook Password right now!)

There is a phishing attack underway at Facebook – it seems to be “spam” related, rather than malicious (This means the hackers are trying to sell stuff, not crash your computer)…which is the good news. The bad news is that if they get your user ID and password they can really embarrass you in front of your Facebook friends by using your account to spam your friends.

How are they doing that? Basically, the way it works is you get a message from a friend, and when you click on it, it takes you back to the sign-up page. Except it’s not really the Facebook sign-up page, it’s the hacker’s (”phishers”) website – You’ll know, because the web address of the phisher will be in the window of your browser. Earlier in the week, it was FBAction.com; today, it’s FBStarter.com.

If this happens, DO NOT ENTER YOUR LOGIN INFORMATION! Just go back to your home page, and continue enjoying Facebook.

If it’s too late, or if you aren’t sure if you might have done this, just go ahead and update your Facebook Password…now…go…your friends will appreciate not receiving spam messages from you.

For more information to to TechCrunch, and see New Phishing Attack Spreading On Facebook. This Time From FBstarter, and Phishing Attack Underway At Facebook. Don’t Sign In To Fbaction.net.

Oh – and if you’re trying to warn your friends ON Facebook about the scam, don’t use the urls for FBAction.net, or FBStarter.com – Facebook has blocked ALL outgoing links to those sites to try to protect its users. Also, be on the lookout for other similar scams.

Photo from TechCrunch.com