Google's social-networking Web site Orkut has been used to spread a malicious Trojan, says Websense.
According to an alert from the security firm, the hoax message, which has been received by a number of Orkut users and is written in Portuguese, looks like it comes from a lonely Orkut member looking for love and features a number of links that appear to point back to the social-networking site.
However, Websense urges Orkut users not to click the links as they result in the Trojan imagem.exe being downloaded. This subsequently opens the Orkut login page while a password-stealing Trojan called msn.exe is downloaded in the background.