It's a well known fact - there are a number of rogue apps floating around on the social web. The ultimate aim is always to part you from a small amount of your cash. For example, you may have come across Facebook apps promising to reveal who has been looking at your profile in the last 7 days.
Facebook doesn't provide the ability to track who's viewing your profile, or parts of your profile, such as your photos
So you go through the process of link clicking, permission granting, contact sharing and so on. From experience, it only takes a momentary lapse in concentration to click on a link posted in good faith on your wall by a trusted contact and then it starts.
Facebook states "Facebook doesn't provide the ability to track who's viewing your profile, or parts of your profile, such as your photos".
If you feel you could be potentially affected, there is an app to help you out - look for Profile Protector from Barracuda Networks (a well known security vendor). Yes, you'll have to allow it the same sort of access but it can be trusted. Once installed, it will remove any potentially malicious or suspicious content from your wall. Better safe than sorry, as they say.