Feeds

Facebook photo-tagging trick used to lure emo kids to survey scam

Clickjack ruse targets melancholy Twihard teens

Security for virtualized datacentres

Facebook survey scammers, the hardest-working crooks in cybercrime, are exploiting Facebook's loosely-controlled photo-tagging technology to develop more attention-grabbing scam lures.

The starting point of the scam commonly appears with users finding themselves tagged in their online friends' photo albums.

Clicking to investigate further will lead to a link seemingly promoting a game based on the upcoming movie Twilight: Breaking Dawn. Other themes have also been seen, for example pictures of food sold at the Olive Garden restaurant chain, posted without permission of the eatery.

In reality, no Twilight game nor pictures are on offer. Would-be marks are simply encouraged to install a rogue application that earns scammers money by encouraging users to complete a worthless survey. Once granted permission, the rogue app messes around with a users' photo album and claims that the user "likes" the rogue app, among other things.

The rogue application uses clickjacking techniques to further its mischief, as explained in a blog post by Sophos here.

"Unfortunately, Facebook doesn't prevent third-party applications from tagging your friends' names onto photos on your wall – even if there are no people pictured in the photograph," explained a Sophos spokesman.

The attack follows an assault using an image of a Playboy-style bunny girl, again ultimately designed to promote a survey scam. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
NASTY SSL 3.0 vuln to be revealed soon – sources (Update: It's POODLE)
So nasty no one's even whispering until patch is out
Russian hackers exploit 'Sandworm' bug 'to spy on NATO, EU PCs'
Fix imminent from Microsoft for Vista, Server 2008, other stuff
Microsoft pulls another dodgy patch
Redmond makes a hash of hashing add-on
'LulzSec leader Aush0k' found to be naughty boy not worthy of jail
15 months home detention leaves egg on feds' faces as they grab for more power
Forget passwords, let's use SELFIES, says Obama's cyber tsar
Michael Daniel wants to kill passwords dead
FBI boss: We don't want a backdoor, we want the front door to phones
Claims it's what the Founding Fathers would have wanted – catching killers and pedos
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.