Scammers exploit new Dr Who girl with Twitter smut video
Grumble flicks, yes, but sans Time Lord's gal pal
Regcast training : Hyper-V 3.0, VM high availability and disaster recovery
Filthy-minded scammers wasted little time latching onto the news that Jenna-Louise Coleman will join Doctor Who in the TARDIS later this year.
The BBC announcement on Wednesday unsurprisingly made the name of the 25-year-old actress a trending topic on Twitter. Porno spammers latched onto this trend by mentioning "Jenna-Louise Coleman" in messages containing links references to supposed sex videos. In reality, users are been tricked through the combination of a smutty lure and a clickjacking exploit into unwittingly following a Twitter account, as explained in a post by Graham Cluley on Sophos's Naked Security blog here.
"The webpage you are taken to doesn't have any content (pornographic or otherwise) related to the Time Lord's latest sidekick. Instead, you'll find what appears to be a portal for an Asian hardcore porn video website," Cluley explains.
"Clicking on the video thumbnails is definitely ill-advised. When I examined the page, I found that each of the videos were masking a secret Twitter follow button."
While this lure promotes an Asian grumble flick portal, the same trick might have been used to direct surfers towards a malware portal or a survey (AKA hand over all your details in exchange for the supposed chance to win an iPad) scam. Browser plugins such as NoScript help defend against clickjacking. Surfers, even those that use NoScript as a defence, should also be cautious about which links they click on. ®
COMMENTS
@ very sad people
Indeed. But happily our fellow El Reg readers are all upstanding members of society, and not a single one of *them* is currently staring vacantly into space, imagining what this hypothetical grumbleflick involving the new Dr Who assistant (and/or the old one) would entail.
Commentard straw poll
If, in 2012, you'll let yourself be led by the dick past the Elysian Fields of free pornography (i.e., 79% of the entire Internet) and into a sadly unsatisfying screwjob such as this one -- is there any hope left for you?
Upvote for 'no'; downvote for 'yes'.
IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
