Feeds

Bogus LinkedIn profiles punt malware to fools

Beyoncé's not your friend, you berk

Protecting against web application threats using SSL

Bogus profiles on social networking website LinkedIn are punting malware to the credulous and starstruck.

Fraudulent accounts in the name of celebrities such as Beyoncé Knowles, Victoria Beckham, Salma Hayek and others are littered with links that take surfers to site harbouring malware, Trend Micro reports. The attack - which is still under investigation - represents a web 2.0 update of the old hacker trick of baiting infectious email attachments with celebrity lures.

As if to reinforce the point, one of the fraudulent profiles is registered in the name of Paris Hilton and tempts the foolhardy with supposed links to her infamous sex tapes.

Another bogus profile created in the name of Beyoncé Knowles claims to offer nude pics of the shapely singer, as recorded in screen shots obtained by Trend Micro here. A quick search of LinkedIn reveals that the offending profile has since been purged. We can expect the others fraudulent registrations to also disappear in short order.

Security researchers have identified that at least some of the maliciously constructed profiles punted malicious scripts, specifically the Decdec-A Javascript code, linked to Trojan attacks.

McAfee adds that hundreds of identikit bogus profiles have been created by miscreants. "The rogue profiles look all alike, with a picture of the celebrity and three links to the parts of the “nude video” like shown in the following picture," McAfee reports.

It's hard to imagine many (if any) would have been taken in by such a crude and transparently bogus ruse. Sophos reckons that the LinkedIn attack might at least partially be geared towards increasing the search engine ranking of hacker-controlled websites.

"Undoubtedly spammers, malware authors and other cybercriminals may be abusing the system to link to their webpages in the hope that it will generate a higher ranking in search engines like Google," a blog posting by Sophos security consultant Graham Cluley explains.

Whatever its main objective, the LinkedIn attack serves to illustrate increased hacker interest in exploiting social networking sites. Over recent days hackers hijacked celebrity profiles registered through micro-blogging service Twitter after exploiting flaws in the password-recover support tool. Separately, ne'er-do-wells launched a phishing campaign designed to trick regular users into handing over account login details. ®

Reducing the cost and complexity of web vulnerability management

More from The Register

next story
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
TOR users become FBI's No.1 hacking target after legal power grab
Be afeared, me hearties, these scoundrels be spying our signals
Jihadi terrorists DIDN'T encrypt their comms 'cos of Snowden leaks
Intel bods' analysis concludes 'no significant change' after whistle was blown
Home Depot: 56 million bank cards pwned by malware in our tills
That's about 50 per cent bigger than the Target tills mega-hack
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
UK.gov lobs another fistful of change at SME infosec nightmares
Senior Lib Dem in 'trying to be relevant' shocker. It's only taxpayers' money, after all
Critical Adobe Reader and Acrobat patches FINALLY make it out
Eight vulns healed, including XSS and DoS paths
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.