Spammers are abusing Google Translate and Short URL services to keep their links unblocked by Facebook’s automated malware scanner. Virus will spread on victim’s profile and automatically will post same Emma Watson scam post on their wall, tagging 12-15 friends on the comments. This new post will them offer same video and steps to others in same post. The people who are running this scam are earning huge money from advertising networks. AlterVista Hosting, where script was hosted by cyber criminal at subdom “nglscripts4” is now removed by web hosting service, because of their ToS violation.
Source: https://thehackernews.com/2013/07/Emma-watson-sex-tape-scam-facebook-virus.html