Feeds

Clickjacking threat punts Facebook survey scam

Share and Destroy

Secure remote control for conventional and virtual desktops

Miscreants have unleashed a new type of clickjacking worm onto Facebook.

The latest assault relies on tricking users into using the Facebook "Share" feature without notifying surfers that content is being shared. By contrast, an otherwise similar clickjacking attack dating back from May relied on duping a user into injudicious use of the social network's "Like" feature.

Sophos explains that the opening move for the latest attack poses as a "Facebook fan page" for the “Top 10 Funny T-Shirt Fails ROFL” and other potentially eye-catching content. These fan pages, once selected, load malicious script from an external domain that means the user will unwittingly share the dodgy page on their profile, promoting the scam to a mark's friends and contacts on Facebook.

Prospective marks running the NoScript Firefox plug-in are protected from the line of attack, which continues with a supposed "human verification step". Marks are invited to complete a time-wasting survey before they are allowed to view the T-shirts.

The shifty sorts behind the scam earn money from completed surveys from dodgy marketing outfits at the expense of wasting everyone's time and polluting Facebook with crud.

Sophos reports that the problem is even worse than that because marks taken in by the scam are invited to submit their mobile phone number, which is enrolled onto an auto renewing subscription service that costs $5 per week. Details of the terms and conditions of enrolment onto the Awesome Test are, predictably, buried in the small print.

Facebook responded promptly to the appearance of the threat by deleting fan pages associated with the scam. Meanwhile Sophos has blocked the domain hosting the malicious code, a move other security firms are likely to follow.

A full write-up of the scam, complete with screenshots, by Sophos researcher Onur Komili is here. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
Webcam hacker pervs in MASS HOME INVASION
You thought you were all alone? Nope – change your password, says ICO
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
Meet OneRNG: a fully-open entropy generator for a paranoid age
Kiwis to seek random investors for crowd-funded randomiser
USB coding anarchy: Consider all sticks licked
Thumb drive design ruled by almighty buck
Attack reveals 81 percent of Tor users but admins call for calm
Cisco Netflow a handy tool for cheapskate attackers
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Internet Security Threat Report 2014
An overview and analysis of the year in global threat activity: identify, analyze, and provide commentary on emerging trends in the dynamic threat landscape.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.