Facebook Expands Security Tools While Combating Phishing AttackFacebook Expands Security Tools While Combating Phishing Attack

Facebook will expand its use of MarkMonitor AntiFraud Solutions to fight phishing attacks, the companies announced as the site was under attack.

Facebook supplements its own security tools with MarkMonitor's security tools and services, which provide around-the-clock monitoring and prevention, as well as site shutdowns, forensic reporting, and a rapid-response network. Panda Security provides detection and analysis of malware.

"Our deep commitment to the safety of our users requires a strong proactive security strategy, best-of-breed technology, and active engagement with industry leaders," Ryan McGeehan, threat analyst at Facebook, said in a statement released Thursday. "MarkMonitor demonstrated that it understood the complexity of the phishing issue we were facing, so it was a natural next step for us to bolster our own security systems with their anti-malware solution."

The site has come under siege this week by FBaction.net, which has delivered messages among Facebook friends, telling them to check out a link. The link takes users to a fake Facebook page requiring users to login with their Facebook user names and passwords.

Facebook has given MarkMonitor the domain name for placement on a blacklist. The social networking site also is trying to disable user access to the servers. Employees are resetting passwords of those who have been affected. Finally, Facebook said it will pursue legal action against the owners of FBaction.net.

"The meteoric success of Facebook makes it a natural target for malware attacks that seek to capitalize on their trusted and recognizable brand," Frederick Felman, chief marketing officer of MarkMonitor, said in a statement. "Our experience protecting Fortune 500 companies, as well as our close day-to-day interaction with Facebook's own dedicated security team, allows us to expertly address Facebook's concerns about malware and phishing, and to help protect their platform and their users from ongoing attacks."

information Analytics has published an independent analysis on the current state of security. Download the report here (registration required).