Social Media Blog

Sharing Information & Knowledge

Jun
15

By

Lily Allen: Marriage and Facebook clickjacking in the same weekend

Category: Social, Technology Tags: , , , , , , , , , Leave a Comment

SWINDON, ENGLAND - MAY 10: (UK TABLOID Lily...

Image by Getty Images via @daylife

Although we see scams spreading on the Facebook social network every day of the week, there seems to be a special spurt of activity at weekends.

Maybe people who are susceptible to scams are more likely to be clicking on links apparently shared by their Facebook friends at the weekend, or maybe the bad guys are taking advantage of Facebook’s own security team being caught on the hop.

I don’t know the reason, but it’s never a surprise to see scams spreading quickly on Saturdays and Sundays. This last weekend we saw scams such as “The World Funniest Condom Commercial – LOL”, Baby Born Amazing Effect – WebCamera and “This Guy Took A Picture Of His Face Every Day For 8 Years” make their mark once again, for instance.

Here’s a couple of other scams we saw, where the links were pointing to clickjacking pages:

Lily Allen shows her breasts on British television!

Lily Allen shows her breasts on British television!
[LINK]
In a broadcast on Channel 4, the singer Lilly Allen shows us her beautiful breasts.

That’s probably not the kind of thing that pop star Lily Allen wants spreading around on Facebook on the very same weekend that she’s getting married.

Meanwhile, some folks took advantage of the weekend to enjoy a trip to the theme park:

Woman has an orgasm on a roller coaster

W0man has an 0rgasm on a r0ller c0aster
[LINK]
I love how the dude stops laughing and goes completely silent once he realizes his girlfriend wasn't joking about having an orgasm.

Note the funky spelling with zeros replacing “o”s – presumably in an attempt to avoid filters.

Hopefully not many people need reminding by now, but you should always think twice before clicking on an unknown link even if it does appear to have been shared by one of your Facebook friends.

Maybe we’d all be safer if everyone had a cold shower before logging into Facebook..

Source :- http://nakedsecurity.sophos.com

Related articles
Enhanced by Zemanta

Jun
13

By

Visit the New Facebook scare spreads on Facebook

Category: Social, Technology Tags: , , , , , , , , , , , , Leave a Comment

SAN FRANCISCO - NOVEMBER 15: Facebook founder...

Image by Getty Images via @daylife

Warnings are being posted across Facebook, warning users to beware messages from friends that invite them to “Visit the New Facebook”.

Although these messages are being shared by Facebook users with the best of intentions, the warning about the risk of being locked out of your own Facebook account may in fact be more of a nuisance than the alleged hacker attack itself.

Here’s a typical message seen on Facebook:

Visit the New Facebook

PLEASE RE-POST FOR EVERYONE!!!!!!!!!THIS NOTICE IS DIRECTED TO EVERYONE WHO HAS A PAGE ON FACEBOOK: IF SOME PEOPLE IN YOUR PROFILE OR YOUR FRIENDS SEND YOU A LINK WITH WORDS "VISIT THE NEW FACEBOOK ' DO NOT OPEN! IF YOU OPEN IT YOU CAN SAY GOODBYE TO YOUR PAGE. IT'S A HACKER WHO STEALS YOUR DETAILS AND REMOVES YOU FROM YOUR OWN PAGE. COPY AND SPREAD THE WORD

However, Sophos researchers have found no evidence that the threat is real. We simply haven’t managed to uncover any reports of any users hit by such an attack.

As such, it appears that this is just the latest chainletter spreading across the social network. We’ve certainly seen plenty of similar examples of hoaxes spread by well-intentioned people in the past.

Remember, a genuine alert would be likely to contain a link to a legitimate security firm’s website – detailing the true nature of the threat.

Remember to always get your computer security advice from a computer security company. Friends may be well-intentioned in passing on warnings, but it’s always good to check your facts before forwarding them any further.

Source :- http://nakedsecurity.sophos.com

Related articles
Enhanced by Zemanta

Jun
10

By

Peeping Tom tricked women into taking hacked webcams into shower, claim police

Category: Social, Technology Tags: , , , , , , , , , , Leave a Comment

CUPERTINO, CA - OCTOBER 20: Two new MacBook Ai...

Image by Getty Images via @daylife

The problem of perverts and cyberstalkers using malware to grab control over female victims’ webcams is one that has been around for quite some time.

Hackers can secretly spy upon people in their bedrooms, and even exploit technology to blackmail young women into posing naked, threatening that they will send other compromising photos to their online friends.

It’s pretty unsavoury stuff, and has probably made some women cautious of handing over their computers to that ever-so-friendly repair man, fearful of what they might install while the computer is in their care.

In the latest case, a 20-year-old man has been arrested for allegedly infecting young women’s Apple Mac computers with spyware that could commandeer their webcam.

Trevor HarwellTrevor Harwell, of Orange County, California, is said to have rigged the MacBooks with error messages that would increase the chances of him capturing nude pictures and movies of the young women.

You’re probably wondering what kind of error messages would achieve such a result.

"You should fix your internal sensor soon. If unsure what to do, try putting your laptop near hot steam for several minutes to clean the sensor."

According to Fullerton Police Sgt. Andrew Goodrich, the error message tricked many victims into taking laptops into their bathroom while taking a steamy shower.

The sleazy scheme was only brought to light last summer when a mother became suspicious about the unlikely messages appearing on her daughter’s computer.

Hundreds of thousands of surreptitiously taken still images, videos and cellphone videos were seized from Hawell’s computer according to a report in the LA Times.

Anyone woman who believes they might have been a victim is invited to contact Fullerton Det. Kathryn Hamel at (714) 738-5327.

Of course, and perhaps most disturbingly, there was nothing stopping the victim of the alleged surveillance being under-age.

It’s true of people of any age, but young people’s PCs must be properly protected with the latest anti-virus software, security patches and firewalls. It is also essential that young people are taught how to behave safely online, to avoid being exploited by sick-minded hackers.

Source :- http://nakedsecurity.sophos.com

Related articles
Enhanced by Zemanta

Jun
9

By

Citibank victimized by hackers, insists cardholders are safe

Category: Social, Technology Tags: , , , , , , , , , , Leave a Comment

NEW YORK - MAY 20: In this photo illustration...

Image by Getty Images via @daylife

Reuters is reporting that Citibank‘s systems were hacked, resulting in a loss of Personally Identifiable Information (PII).

Citibank says that data for 1% of their cardholders was accessed through this breach, but customers‘ Social Security Numbers (SSNs), birth dates, card expiration dates and CVV codes are safe.

Information that may have been disclosed to the hackers includes customers’ names, account numbers, contact details and email addresses.

According to Citibank’s website they are the world’s largest provider of credit cards, issuing more than 150,000,000 cards globally. Based on these numbers, information for 1,500,000 or more individuals may have been compromised.

In April Paul Gaulant, former head of the bank’s credit card unit, told Reuters, “Security breaches happen, they’re going to continue to happen … the mission of the banking industry is to keep the customer base safe and customers feeling secure about their financial transactions and payments.”

That may be true, but feeling secure is not the same as being secure. How this information was acquired and why it wasn’t protected against theft is a far more important question.

Citi has stated they will notify customers believed to be affected by the breach.

Customers affected by this incident should be on high alert for scams, phishing and phone calls purporting to be from Citibank and their subsidiaries.

While Citi customers aren’t likely to have fraudulent charges against their accounts as a result of this breach, they are likely to encounter social engineering attempts to enable further crime.

Considering that the attackers have your name, account number and other sensitive information they are able to provide a very convincing cover story to victims.

Never accept incoming communications purporting be from financial institutions you do business with, whether by email or phone call. Call them back using only the phone numbers published on your cards or statements. When logging in to perform online transactions, always enter their website address directly in your browser. Never click links.

Source :- http://nakedsecurity.sophos.com

Related articles
Enhanced by Zemanta

Jun
2

By

Rihanna and Hayden Panettiere sex video spreads Mac malware on Facebook

Category: Social, Technology Tags: , , , , , , , , , Leave a Comment

LOS ANGELES, CA - JUNE 02: Actress Hayden Pan...

Image by Getty Images via @daylife

Hot on the heels of an earlier Mac malware attack spreading via Facebook links, we are seeing another attempt to infect Mac users on the social network – with what claims to be a sex video of celebrities Rihanna and Hayden Panettiere.

If you see messages like the following on Facebook, please do not click on the links.

Hot Lesbian Video - Rihanna And Hayden Panettiere!!

one more stolen home porn video ;) Rihanna and Hayden Panettiere

Hot Lesbian Video - Rihanna And Hayden Panettiere!!
[LINK]

Rihanna And Hayden Panettiere !!! Private Lesbian HOT Sex Tape stolen from home archive of Rihanna!

For those who don’t follow such things, Hayden Panettiere played the part of the cheerleader in the sci-fi TV show “Heroes“, and Rihanna is a pop star famous for her umbrella-ella-ella.

Not that you’ll get to see much evidence of that if you click on the link as – on Apple Macs at least – you may find yourself ending up on a webpage which tries to infect you with malware in the form of a fake anti-virus attack.

Fake anti-virus attack on Mac

Has a private lesbian hot sex tape really been stolen from the home archive of Rihanna? Personally I think it’s unlikely, but it’s surprising what people will believe these days (and indeed, what celebrities will get up to) so it’s no wonder that some folks might click on the link.

SophosLabs is adding detection for the various components of this Mac malware attack as OSX/FakeAV-DWK, OSX/FakeAV-DWN, OSX/FakeAvDl-A and OSX/FakeAVZp-C. Users of Sophos products, including the free Mac anti-virus for home users, will be automatically updated.

Source :- http://nakedsecurity.sophos.com

Related articles
Enhanced by Zemanta

Jun
1

By

IMF boss rape video? Mac malware spreads via Facebook links

Category: Social, Technology Tags: , , , , , , , , , , 1 Comment

PARIS, FRANCE - MAY 16: Newspapers with covera...

Image by Getty Images via @daylife

Mac OS X malware is being spread by sick messages spreading virally across Facebook, claiming to be a video of controversial IMF boss Dominique Strauss-Kahn.

The fake anti-virus attack first appears in your timeline as a message apparently posted by one of your friends.

IMF boss Dominique Strauss-Kahn Exclusive Rape Video - Black lady under attack!

oh shit, one more really freaky video O_O

IMF boss Dominique Strauss-Kahn Exclusive Rape Video - Black lady under attack!
[LINK]
IMF chief Dominique Strauss-Kahn rape scandal. Mother of Alleged Rape Victim: Dominique Strauss-Kahn Did Not Want To Be President of France - ABC News

(I have obscured the image used in the message in case it causes offence).

The message’s text refers to the news story of IMF chief Dominique Strauss-Kahn who is facing charges in New York over charges that he tried to rape a hotel maid.

In terms of sick headlines to entrap users, this one ranks right up there. It’s been, of course, a very big news story – and many people have been following the case with interest. And that probably explains why the hackers have used the promise of a video as bait.

Clicking on the link takes you to a webpage, which appears to consist of a still from a sex movie. However, when I visited the page on my Apple Mac I was rapidly redirected to a “Mac Defender”-style fake anti-virus attack, written specifically with the intention of infecting my computer.

Mac malware attack

Sophos Anti-Virus for Mac intercepted the attack as OSX/FakeAVZp-C.

What’s interesting is that up until now we have mostly seen these fake anti-virus attacks target Mac users by poisoning search engine results. But now we are seeing them being distributed by viral Facebook spam campaigns as well.

Mac malware attack

It’s probably not too difficult to put yourself in the shoes of a computer user who knows that they are possibly about to watch a seedy video, only to find themselves facing a screen warning them of numerous security threats.

In many ways this is a genius piece of social engineering to frighten unsuspecting Mac users into installing the software and handing over their credit card details.

It’s just a shame that Facebook’s own security systems are currently failing to stop these links from spreading.

Download Sophos’s free anti-virus for Mac home users. It’s automatically updated to protect against the latest threats. Another step you should take is changing the default settings on Safari – it’s not a complete defence, but it can help a little.

Related articles
Enhanced by Zemanta
« Older Posts
Newer Posts »
Close