While Facebook’s newly announced graph search capability is awesome for people who like social networking, it also provides criminals with another source of information about potential targets. The ability to query like this really opens a can of worms.
In spear phishing land, criminals are always searching for information to craft personalized and seemingly genuine emails. This feature nets search results not just of your Facebook friends, but also the friends of your friends, which can potentially be a pretty large network.
We’ve seen law enforcement catch criminals by creating fake identities on Facebook to gather information, and we know that advertisers use information from social networking sites to target customers, criminals do the same.
Source: Help Net Security