Kaspersky Lab researchers are warning of a new phishing attack on Facebook that uses hijacked accounts to impersonate the site's security team.

Security vendor Kaspersky Lab has reported a new phishing attack on Facebook that uses hijacked accounts to pose as the social network's security team and trick users into divulging credit card numbers.

Once the account is compromised, it is used to send out a message to all contacts, warning them that someone has reported a problem with their accounts and they will be turned off unless re-confirmed by the accountholder. Within the message is a link that takes victims to a Web sited dressed to look very similar to a Facebook page.

Once on the Web site, the cyber criminals ask for name, e-mail, password, Webmail system and password to e-mail. With this information, the attackers can compromise more Facebook accounts.