Feeds

Clickjacking threat punts Facebook survey scam

Share and Destroy

Boost IT visibility and business value

Miscreants have unleashed a new type of clickjacking worm onto Facebook.

The latest assault relies on tricking users into using the Facebook "Share" feature without notifying surfers that content is being shared. By contrast, an otherwise similar clickjacking attack dating back from May relied on duping a user into injudicious use of the social network's "Like" feature.

Sophos explains that the opening move for the latest attack poses as a "Facebook fan page" for the “Top 10 Funny T-Shirt Fails ROFL” and other potentially eye-catching content. These fan pages, once selected, load malicious script from an external domain that means the user will unwittingly share the dodgy page on their profile, promoting the scam to a mark's friends and contacts on Facebook.

Prospective marks running the NoScript Firefox plug-in are protected from the line of attack, which continues with a supposed "human verification step". Marks are invited to complete a time-wasting survey before they are allowed to view the T-shirts.

The shifty sorts behind the scam earn money from completed surveys from dodgy marketing outfits at the expense of wasting everyone's time and polluting Facebook with crud.

Sophos reports that the problem is even worse than that because marks taken in by the scam are invited to submit their mobile phone number, which is enrolled onto an auto renewing subscription service that costs $5 per week. Details of the terms and conditions of enrolment onto the Awesome Test are, predictably, buried in the small print.

Facebook responded promptly to the appearance of the threat by deleting fan pages associated with the scam. Meanwhile Sophos has blocked the domain hosting the malicious code, a move other security firms are likely to follow.

A full write-up of the scam, complete with screenshots, by Sophos researcher Onur Komili is here. ®

Gartner critical capabilities for enterprise endpoint backup

More from The Register

next story
Microsoft: We plan to CLEAN UP this here Windows Store town
Paid-for apps that provide free downloads? Really
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
Who needs hackers? 'Password1' opens a third of all biz doors
GPU-powered pen test yields more bad news about defences and passwords
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Hear ye, young cyber warriors of the realm: GCHQ wants you
Get involved, get a job and then never discuss work ever again
Chinese hackers spied on investigators of Flight MH370 - report
Classified data on flight's disappearance pinched
Microsoft cries UNINSTALL in the wake of Blue Screens of Death™
Cache crash causes contained choloric calamity
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
7 Elements of Radically Simple OS Migration
Avoid the typical headaches of OS migration during your next project by learning about 7 elements of radically simple OS migration.
BYOD's dark side: Data protection
An endpoint data protection solution that adds value to the user and the organization so it can protect itself from data loss as well as leverage corporate data.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?