Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

Facebook Clickjacking - Be careful with SHARE and LIKE Buttons

In Facebook, clickjacking attacks continue to circulate using the "Like" or "Share" buttons that will surreptitiously  link you to malicious websites.  Always be careful with all links or any buttons offered to you. As the old saying goes, "Think before you click" or you may be spending hours repairing your PC. Always be careful in sharing any personal information in social networking applications.

Facebook Clickjacking Attack Spreading Through Share Button
http://www.sophos.com/blogs/sophoslabs/?p=10716
http://www.informationweek.com/news/security/attacks/showArticle.jhtml?articleID=226700456

QUOTE: Facebook users came under attack from a new clickjacking scam that could result in lost money as well as aggravation, spread by the social networking site's Share button. Those behind this latest Share button scam want Facebook users to answer a few questions within a simple survey; one blank is the request for a cell phone number. By providing their cell phone number without reading the fine print, users are subscribing to a paid-phone, automatically renewing service that charges $5 per week via the cell phone bill. "Unfortunately, most people won't read the fine print and will willingly hand over the information and likely won't notice the charges until the end of the month,"

PREVENTION: AVOID accessing “Top 10 Funny T-Shirt Fails ROFL.” link and filling out "verification page" requesting your cellphone. "Funny T-Shirt Fails" scam costs victims a $5 weekly charge on their cell phone bill, finds Sophos.

Likejacking Worm - Dangers of selecting "Like" button on malicious pages
http://www.sophos.com/blogs/sophoslabs/?p=9783  
http://www.sophos.com/blogs/gc/g/2010/05/31/viral-clickjacking-like-worm-hits-facebook-users/

QUOTE: The technique is exactly as Graham describes - when you “Click here to continue” you’re in fact clicking an invisible link (detected as Troj/Iframe-ET) which marks the website as one that you “like” in Facebook. This of course posts a message to your newsfeed, your friends see it and click on it, and so it spreads