Websense Security Labs has been tracking various Facebook attacks for many years...Most social networking accounts can only be viewed if the account holder explicitly accepts or requests another account to be added as a "friend". A generic Web crawler and even a search engine Web crawler would not be able to mine the pages on a social networking site due to lack of permission.

The attacks on Facebook and MySpace in the last few weeks have been very interesting...To give you an example of an attack that has been going on for over six months, we've shown a recent Facebook phishing email that our Honeyjax system picked up this weekend...