A few “apps” in Facebook’s ecosystem appear to have fallen under the radar of its security checks. I was invited to verify my account by a app under Facebook’s app.facebook.com domain but the email was sent with an Exchange server, not ZuckMail 🙂
What (if any) process does Facebook have to shut these down?
