Researchers at Fortinet have discovered what they believe to be the first malicious widget to appear on the popular social networking site Facebook.