Facebook's "Secret Crush" malicious widget

Facebook's "Secret Crush" malicious widget: "Secret Crush appears so far to have infected about three million Facebook users."

'Secret Crush' malicious-code widget tells you someone has a 'Secret Crush' on you, and if you want to find out who it is, you first have to invite five friends to use it by using the Facebook invitation process,"

Instead, Lovet says, the application displays a small iFrame with a download link that will try to infect the user's computer with the Zango spyware software to serve up ads."

Nice! Overdue, I'd say. Facebook's got the viral ...