#likejacking

Clickjacking is an attack that tricks a user into clicking a webpage element that is invisible or disguised as another element. This can cause users to unwittingly download malware, visit malicious web pages, provide credentials or sensitive information, transfer money, or purchase products online.Typically, clickjacking is performed by displaying an invisible page or HTML element, inside an…

Ihr wollt "liken" dann drückt den Like-Button; ihr wollt teilen, dann drückt den Share-Button. Klingt logisch, oder?

Heute habe ich geliked und geteilt, allerdings ohne es zu wollen - lediglich indem ich auf Video in meiner Wall geklickt habe. Aufgepasst: auf meiner Wall erscheinen nur Aktionen von "Freunden" - in dem Fall sogar ein guter. Wenn der mir was empfiehlt, dann ist das was für mich. Da konnte ich mich die letzten Jahre blind darauf verlassen.Heute ist das leider nicht mehr so. Facebook führt eine Eigendynamik, die schon etwas seltsam anmutet.

Jetzt zur Sache. Um dieses Video mit dem unverfänglichen Titel "Hübsche Topmodel Judendsünde im Internet aufgetaucht" geht es:

Als altes GNTM-Urgestein klickte ich natürlich instinktiv und ohne nachzudenken drauf. Mit folgendem Ergebnis:

ich habe das Video automatisch geliked

ich habe es automatisch mit meinen Freunden geteilt und

es wurde automatisch in meine "Aktivitäten und Interessen" aufgenommen.

Danke Facebook!

Update: Der nächste Dreck mit der gleichen Funktionsweise.

Den Blödsinn aus den eigenen "Aktivitäten und Interessen" zu entfernen geht übrigens ganz einfach (Achtung, Ironie!):

Auf das eigene Profil gehen > Info > Aktivitäten und Interessen > Bearbeiten > Andere Seiten anzeigen > dort die Dschungelnervensäge entfernen.

I pulled a few of Barnett's words of the year that are part of my world:

Grant Barnett via NYTimes.com

LIKEJACKING Tricking users of a social media site, especially Facebook, into posting spammy content in their accounts or on their pages. Usually activated by clicking a “like,” “fave” or “thumbs up” button.

Just another one of the Malicious wares..............

Amplify’d from www.infopackets.com

Free Norton App Targets Malicious Facebook 'Likejacking'

With accessibility being one of the central features of almost every "smart" device, it is no wonder that social networking has become an integral part of the everyday routine.

But one of the factors that takes away from this experience is the increasing number of virtual traps that hackers design to victimize and/or profit from social networking users.

Among the most prolific attacks on Facebook members is the "likejacking" scam, a form of click hijacking whereby users are tricked into recommending a site they've never visited.

In response to this malicious practice, Norton has created a new application for the social network that will scan the newsfeeds on your page for malicious links. The best part is that the application is free of charge.

Uploaded Facebook Videos Linked to Likejacking Scam

Norton collected a sample of 3.5 million video posts uploaded onto Facebook in early August. The results showed that up to 15 per cent of these videos contained a "likejacking" attack in some form. (Source: allfacebook.com)

To increase the chances of an individual clicking on a corrupted link, online deviants attempted to design the most compelling (and realistic) taglines. Among the most popular "likejacking" scams is a video entitled "This man takes a picture of himself EVERYDAY for 8 YEARS!" complete with an accompanied link.

Contagious Link Spreads Quickly

Naturally, the link is corrupt, taking the user-turned-victim to a blank page with only a tab that reads "click here to continue". Clicking on the tab publishes the original message onto their own Facebook page, complete with a "like" notation, which effectively recommends the unwanted link to all of their Facebook friends.

The Norton application promises to scan links posted within a 24 hour window and members can visit the Norton Facebook page to access the Cybercrime Index, which is updated daily to reflect the threat level for each day. (Source: canoe.ca)

The app is available via Facebook here.

Read more at www.infopackets.com

I might sound like a broken record when I say that another Facebook scam is spreading across the social network. This one lures users in with a video of a woman that "exposes" herself on live television. It should be noted that this particular video lure has been used in previous likejacking campaigns.

This girl must be Out of her Mind to do this on live Television! [redacted].de  It is really embarassing.! 

This version of the scam leads users to a page with an embedded YouTube video. When a user clicks on the play button, their click is hijacked and their Facebook news feed displays the same post seen above, indicating that they've "liked" this page. This is called "likejacking" and it has been a problem for quite some time.

This wasn't the only version of the scam campaign appearing in Facebook news feeds. Another version of it led users to a similar page, only this time, asking users to "confirm" their age by liking the page before continuing. 

To ensure that this scam continues, the scammers are using Tumblr sites to redirect users to the same Fake YouTube page: 

By redirecting users via Tumblr, the scammers can evade Facebook filters as well as stay off the radar of Facebook's recent Web of Trust integration.

This particular version of the scam mixes things up, randomly serving 14 different Tumblr sites, while another version is using 46 Tumblr sites to redirect users.

As with most Facebook scams, the payoff comes from users that fill out surveys:

If you or a friend has been tricked into "liking" one of these pages, be sure to report the post as spam. You can do so by clicking on the "x" next to the post, then select "Report Post / spam" to report it to Facebook's Security team.

There has been a resurgence of 'like' or 'likejacking' scams appearing on Facebook over the last month. The latest scam is riding the coat tails of one of the most well known pop stars out there - Justin Bieber.  This isn't the first time Bieber has been used in a Facebook scam campaign. I blogged about a likejacking campaign: "I can't believe a GIRL did this because of Justin Bieber," which made its way through Facebook news feeds earlier this year. 

This scam shows a thumbnail of Justin Bieber in handcuffs:

Justin Bieber Goes To Jail (VIDEO)

WOW this really has to be an awkward moment for justin bieber and all of his loyal fans across the globe.

If a user clicks on the link, they are redirected to a page that looks just like YouTube:

There is no video thumbnail shown on this page. Instead, what looks like a YouTube video is visible to the end user. In the early stages of this scam, once a user clicked on the play button, their click would be hijacked (or "likejacked") and a post in their news feed would appear, indicating that they've "liked" this page.

The photo is legitimate, as Bieber himself tweeted it out. It was taken on the set of CSI, where he made a cameo appearance.

The people behind this scam have been fairly active. Above was this Facebook Page that was associated with this scam. At one point, over 4,000 people were tricked into 'liking' this video. However, the latest version of it is showing less than 100 people have been tricked. It's quite possible that the scammers are rotating these pages out to keep this scam going and prevent Facebook from catching on.

  Now if a user clicks on the video thumbnail, they will be prompted to confirm that they did want to "like" the page. Interesting to note that the confirmation dialog above did not appear when I was testing this page earlier today. 

REMOVE JUSTIN BIEBER GOES TO JAIL "LIKE" FROM MY PAGE

If you or someone you know has fallen for this scam, you can remove and report this post by visiting the affected profile and clicking on the "x" next to the news story. From the drop down menu, select "Report post / spam" - that's all there is to it.