A website has been discovered by Verisign's iDefense Labs that has about 1.5 million compromised Facebook accounts "for sale". They are available at a selling price of $25 per 1000 accounts with ten friends or less and $45 per 1,000 for those accounts who have more than ten friends.

The researchers revealed that there is a possibility of malware through the compromised user's friend network. Though, the accounts do not contain sufficient personal information to commit outright identity theft, but social engineering may produce these personal details.

The information is based on the most current available number of users (about 400 million) provided by Facebook. The accounts consist of about four tenths of a percent of the entire user base. eWeek's Brian Prince reports that Facebook is not able to estimate how many more accounts may be compromised by other hackers.

After an account is compromised and detected by Facebook, the user's account is suspended. The user should change his or her password and take some other steps to confirm that the account is secure.

Users should add friends very carefully, especially ones, whom they don't know directly. They should make it sure that their privacy settings are set so that personal information is protected.