According to researchers at VeriSign's iDefense group discovered a hacker was selling Facebook user names and passwords in an underground hacker forum. It was estimated he had about 1.5 million accounts - and was selling them for between $25 and $45. And the site is constantly under attack from hackers trying to spam these 400 million users, or harvest their data, or run other scams.