A handful of rogue applications were sending Facebook users to a phishing site, stealing passwords, and then spamming users’ friends.. Read the rest at cnet.com.