.. just now.

(webmail being browser based email, like hotmail, gmail, yahoo etc)

A couple of friends at work ended up with trojans through "clickjacking" as its being called, and it seems both got it from fake bebo emails.

Basically its the substitution of a genuine link with one that lets the attacker take control of the browser. (thats an over-simplification, but you get the idea!)

Note : This will ONLY affect people using Firefox or Google Chrome browsers.

More secure browsers such as Internet Explorer and Opera are unnafected.

In both cases the virus was the Bankpatch Trojan - free symantec removal tool is here if you need it : http://www.symantec.com/business/security_response/removaltools.jsp

Edited at 18:43 Tue 3/02/09 (GMT)

What about safari? I only have a googlemail that isn't given out to anyone.... So I should be safe shouldnt I?

Ooops Google Adsense placed a Chrome browser ad on this page.

I would asume Safari will need patched too, simply because its Gecko-based like FF and GC.

Sorry if this seemed alarmist, since the problem has been around since the end of last year, but I hadn't come across it 'till now. Targeting social netowrking sites is bound to cause problems as people are so used to clicking links in such emails now.

Patches for GC and FF should be along with the next updates according to a quick google/forum browse.

I'm glad I'm safe and came running back to I.E