Google’s social-networking website Orkut has been used to spread a malicious Trojan, says Websense.According to an alert from the security firm, the hoax message, which has been received by a number of Orkut users and is written in Portuguese, looks like it comes from a lonely Orkut member looking for love and features a number of links which appear to link back to the social-networking site.

However, Websense urges Orkut users not to click the links as they result in the Trojan ‘imagem.exe’ being downloaded. This subsequently opens the Orkut login page while a password-stealing Trojan called ‘msn.exe’ is downloaded in the background.