Virtual New Year cards have become a phishing tools in the hands of fraudsters in order to obtain Facebook passwords.
Caution should be exercised due to the fact that we can also receive such “wishes” from our friends.

Dedicated sites can be found on the network for creating virtual cards. Entering the name in a specified field triggers the script that gains access to the victim’s Facebook account. If a takeover is successful the account begins to send out links to friends from the victim’s contact list.

If you use the same password as the one for Facebook on other websites, such as online banking or email, the situation becomes especially dangerous.

Source: Cyber Security Philippines CERT