Mashable are reporting on a new clickjacking attack making its way through Facebook friends.
Look out for posts on friends walls with the caption “New Pix.” Clicking on it takes you to a YouTube video. Whilst there, using a combination of hidden frames, this virus is updating your profile with the same post. Currently it seems to be limited to watching a YouTube video, but given the hidden actions happening without your knowledge this is a security risk.
Don’t be too quick to click! Maybe ping your friend first if the link looks unusual.