Category: Facebook Hackers

Osama bin Laden leaked video scam on Face book rises yet again

An original version of the variety of Face book scams we have seen since the bereavement of Osama bin Laden has emerged. Naked Security reader Sampath send us a tip-off about the newest dissimilarity he had seen of a viral scam that poses as a video of the killing of Osama bin Laden:

 

OSAMA KILLING REAL VIDEO LEAKED

OMG! Real video of Osama Bin laden being killed. Video leaked by wiki leaks. Watch it before it gets deleted.

 

A link in the message may, at first look, emerge to point to the YouTube website but in detail points to a similar-looking Indian domain name ending in “.in”. If you make the fault of clicking on the link you are taken to a third-party webpage, which poses as a security confirmation check from YouTube.

 

 

Rather why anybody would imagine that typing in the words “real video” is any form of security verification is further than me.

But what’s occurrence here is that when you submit the so-called CAPTCHA text you are without knowing publish the message to your own Face book wall. This spreads the message virally to your Face book friends, and helps spread the scam additional on behalf of the bad guys.

 

 

The scammers create their money by tricking you into taking an online survey. They earn charge for each person they manage to complete it, and you might be the sort of person who is tempted to answer the survey in the belief that you’ll get to see a video of the Osama bin Laden being killed.

Keep in mind – the real YouTube would never ask you to complete an online survey before watching a video, and that scams like this are rife across Face book. As long as Face book users keep falling for scams like this, they’ll carry on being a problem.

 

 

At the time of script this latest iteration of the Osama bin Laden Face book scam appear to have been eradicated. But I wonder how long before a new variant arises?

Face book scam –“Twilight Breaking Dawn”

Face book users are finding themselves tagged in their online friends’ photo albums, in an attack seemingly under attack at fans of the “Twilight” teen leech romance movies. Following an attack against photo albums using an image of a Playboy-style bunny girl, scammers are now pretending to link to a game promoting the upcoming movie “Twilight Breaking Dawn” starring heart throbs Robert Pattinson and Kristen Stewart as the starcrossed lovers Edward Cullen and Bella Swan.

As well as Face book photo albums, users are also being tricked into “Liking” the scam links.

 

Play Twilight: Breaking Dawn

Be the first of your friends to play the awesome new Twilight game on Face book!

 

If you click on such a link then you will be taken to a Face book page which to all intents and purpose appear to be promote an online game, being used to market Twilight Breaking Dawn. But if you click on the button marked “Play Now” then you will be click jacked into saying you “Like” the link, thus spreading the link virally to your Face book friends.

 

If you’re running a protection against click jacking, such as Firefox add-on No Script, then you will be warned – but most people are probably unaware that the page has secretly claimed that they like the game, even though no game has yet been played! The scam doesn’t end there, however, as that would simply spread the link without earning any money for the ne’er-do-wells behind it. Users are then presented with a dialog, asking them to grant permission for a third party application to access their Face book account, and post messages, updates and photos to their wall.

 

Of course, if you’re a fan of “Twilight” you will quite possibly grant permission without thinking. The only problem being that this isn’t a legitimate application request, but being done by a rogue app which wants to make money out of your devotion to the works of Stephanie Meyer’s series of novels.

Predictably, with the ability to now post to your Face book account, the scammers now present the final piece of the jigsaw: an online survey which earns them affiliate commission for each person who completes the questionnaire. You will note that the survey deliberately presents itself in a convincing Face book style, which may trick some users into believing that it is legitimate. It seems that fans of Twilight are only too easy pickings for Face book scammers, judging by the large number of reports from affected Face book users we are seeing today.

Video scam Of Osama Shoot down spreads on Face book

Face book user are being tempt to tick on links to what purport to be a video of Osama bin Laden life form shot, in the newest in a sequence of scams exploit the hot news story of the Al Qaeda leader’s death.

 

The messages come into view as follows:

 

Watch the Osama Shoot down video

Osama Dead – Censored Video Leaked

on.fb.me


Osama is dead, watch this exclusive CNN video which was suppressed by Obama Administration due to level of violence, a must watch. Leaked by Wiki leaks.Clicking on the link, though, will not right away show you some amazing recording of US Navy Seals attacking Osama bin Laden’s mix in Pakistan.

Instead, you’re told you will have to take an online survey.

That ought to be sufficient to set your alarm bells ringing – as survey scams are a continuing trouble on Face book, earning scammers payment with every survey they run to trick users into implementation.What’s most appealing about this scam is that they trick you into cutting-and-pasting a line of JavaScript into your web browser’s address bar.

Not that you’ll comprehend that you’re doing that, of course. As far as you know all you’re doing is following a sequence of commands and keyboard presses before you watch the video. But any time you paste a script into your browser’s address bar; you’re efficiently running code printed by the scammers without the safety net of shield.

Before you know it, you’ll be distribution the news of the “Osama Shoot down video” with all of your Face book friends, and the scam will be dispersion virally.My guess is that you don’t desire to make it so easy for the scammers to run their scripts on your browser – so don’t fall for scam like this.

 

Be very careful not to be fooled by scams related to Osama bin Laden’s death, not just on Face book but on other parts of the internet too. Such a big news story always seems to attract the interest of fraudsters and malware authors.

If you want to keep up-to-date on the latest scams, and are a member of Face book, don’t forget to join the Sophos Face book page to keep informed about the most recent security news.

Face book comment-jacking? OMG! I can’t believe JUSTIN Bieber did THIS to a girl

It’s preliminary to appear like Face book can’t win next to those who wish to use their overhaul to scam, spam and just cause difficulty. Over the last day or so, a new kind of assault has been dispersal using the phrase “OMG! I can’t believe JUSTIN Bieber did THIS to a girl”.


 

It leads to a page asking you to confirm a simple math problem to “prevent bots from slowing down the site”. In actuality, it is another click jack-type scheme in which you are asked to type the answer into a box. It doesn’t matter what you type, because it’s a social engineering trick. What you are actually typing is a comment that is used to share the link with your friends on Facebook. You can see the tooltip that says “Add a Comment” in the screenshot.

 

This bypasses Face book’s recent attempt at detecting likejacking fraud. Links you comment on are not using the same mechanisms that Facebook is monitoring when you click “Like”. Many moons ago, the first Facebook attacks started with illegitimate applications asking for permission to access your wall and spread their messages by spamming your friends through wall posts. While this worked well, it was a bit easy for Facebook to track down and remove the bogus apps.

 

Early in 2010 we saw the first attempts at like jacking. This technique involves layering one image over the top of a Like button and tricking the victim into clicking something that appears to play a video or a continue button, when in fact they are clicking the Like button hidden underneath. More recently we have seen the attackers trying lots of new techniques. In the past few months we have seen them tagging people in photos they are not in to get you to click, inviting people to fake events and even making you an administrator of a Facebook page that isn’t yours.

 

While protecting yourself may not be as simple as not clicking anything that says “OMG!” that isn’t a bad start. Be skeptical, understand that messages from your friends may not in fact have been sent to you willingly, and if you are really tempted to click, take a short timeout to conduct a Google/Bing search.As of the time of this writing some of the YouTube videos this scam leads to have been removed by YouTube. However, one video that is still working has over 525,000,000 views since February and thousands of comments in the last 24 hours — in other words, since this Facebook scam has been making the rounds.

Osama Bin Laden bereavement video scam spreads virally on Face book

A link which claims to tip to a video of the death of Osama Bin Laden has been extend virally across Face book today, just hours after the death of the Al Qaeda leader. The messages, posed as updates on Face book users’ walls, assert to point to banned video footage of Osama Bin Laden’s death:

 

SHOCKING NEW video of OSAMA BIN LADENS DEATH!!

Exclusive BANNED VDEIO footage of Osama Bin Laden being killed!!!



 

(In the screenshots used all through this article we have hidden the image as some may find it disturbing).

Clicking on the link take you to a Face book page which urges you to like and split the link with your Face book friends, before you can watch the “shocking” footage:

 

However, sharing the link with others just helps extend it more across the social network, and as an alternative of a shocking video you are in its place obtainable with an all-too-familiar survey which you are told you must whole before you can go any further. The scammers earn money every time a survey is completed, and that’s why they desire you to share the link with others.

 

 

Sophos is advising computer users to watch out for scams related to Osama Bin Laden’s death, not just on Face book but on extra parts of the internet too. Such a big news story forever seems to attract the curiosity of fraudsters and malware authors.

Miley Cirus drugs scam hits Face book

Face book user have been bombard with up till now one more spam review scam, this occasion using the entice of a video allegedly depicting actress Miley Cirus taking drugs. In a blog post, Sophos senior technology consultant Graham Cluley warned that the survey scams typically arrive from a user’s friend’s account with a message such as: “OMG Miley Cyrus is caught smoking a BONG on video [LINK]”.

Clicking on the link will obtain a user from side to side to another page talented the footage, and clicking through again will enable a rogue Face book request to run on the user’s computer.“If you do agree to grant the authorization, you’ll be taken to an online survey (part of the CPALead network) which earn cash for the scammers through affiliate revenue,” Cluley explained.

“While you’re finishing the survey, and earning the scammers a few money, their rogue claim has posted the link onto your wall, sharing it with your friends and thus perpetuating the scam even more.”He warned that scams of this type could also be used to filch personal information. “If you’ve been hit by a scam like this, get rid of reference to it from your newsfeed, and withdraw the right of rogue application to right of entry your profile via Account/ Privacy Settings/ Applications and web sites,” wrote Cluley.

 

Social engineering-led attacks such as this are probable to grow in popularity in 2011, according to several security vendors.Trend Micro warned in its prediction for the impending year that the practice will become increasingly popular via email, as it is a more measurable way of sending out malware than infiltrating web sites as part of a drive-by-download attack.

 

Twilight Saga fan Being Scammed on Face book spreads virally across the site.

Devoted Twilight Saga fans have been under attack by hackers on social networking site Face book.

Scammers are pretending to link to a game that supposedly promotes the Twilight Saga: Breaking Dawn which stars Robert Pattinson and Kristen Stewart. However, the link is really a scam which is activated when users click the ‘Play now’ button.

Once clicked, users are snap jacked and a post appears on their Face book wall announce that they ‘Like’ the link. This income that the scam has extend virally across the site.Users are then obtainable with a dialogue box which asks them to grant authorization for a third party request to access their Face book account and post messages and updates etc on it.

According to IT Web, Brett Myroff, CEO of regional Sophos distributor, Sophos South Africa said: “Twilight fans might quite perhaps grant permission without thinking. The only problem is that this isn’t a legitimate application request, but a rogue submission that wants to make money out of users’ devotion to the series of novels.

“Unsurprisingly, having gained the ability to post to your Face book account, the scammers then present an online review that earns them affiliate commission for each person who completes the questionnaire. If Face book users have been exaggerated by this scam, they ought to clean up their account before any further damage is done.”

Miley Cyrus Pictures worn as entice in New Face book Scam

Pictures of young actress Miley Cyrus are again being used as lure by Face book scammers to trick users into spamming their friends and completing deceptive surveys. Ever since risqué photos of her were leaked onto the Internet at the age of fifteen, Miley Cyrus’s name has been regularly used in scams.

The recently turned 18 actresses and singer didn’t make things all that hard either with all the controversial situations she constantly placed herself in. The latest one involved being photographed while smoking salvia from a bong a few days after her eighteenth birthday.

 

 

According to Face crooks, the latest spam messages circulating around Face book read: “SICK! I lost all my respect for MILEY CYRUS after watching these shocking pictures! ===> [link]”


 

The link takes users to a rogue app called “Miley did a sad mistake” which requests permission to post on their walls and access their profile information. The only purpose of this app is to send spam messages from victims’ accounts in order to propagate the scam.

 

And of course, people who misguidedly install the app don’t get to see any picture of Miley Cyrus. Instead, they are asked to complete a survey, allegedly as a security check. In addition to earning money for scammers through affiliate marketing schemes, these so called surveys attempt to subscribe people to premium rate services billed to their mobile phones.

 

 

People who fell victim to this scam should go to Account > Privacy Settings > Applications and Websites and revoke the permissions of any apps they don’t recognize or need.

 

 

Affected users should also remove the spam messages posted by the app on their walls in order to protect their friends and family members. Also, people who provided their phone number during one of these surveys should contact their mobile operator immediately and request the blocking of any additional charges.

Lindsay Lohan Spreader Tape worn as decoy in Face book Scam

Face book scammer’s shows potential a Lindsay Lohan Spreads the tape to trick users into completion surveys and spamming their friends. It’s been a while since we haven’t seen the name of a celebrity being battered to push malware or scam people, but earlier or afterward it had to happen again.

This time, its American actress, pop singer and model, Lindsay Lohan, who scammers imagine in an adult tape leaked onto the Internet. Some post linked with this scam even entail that there were more than two protagonists in this uncomfortable homemade video. Spammed links take user to a Public Event on Face book, whose info reads: “Guys… don’t ask how I have this video. THIS IS ONLY BEING LEAKED ON FACEBOOK.”

A built-in abridged URL direct visitors to yet another Face book page, called “HD Video Player,” which has nothing to do with Lindsay Lohan. It seems that whoever started this scam mixed up the landing pages. It reads “Shocking McTruth, the most talked concerning video on the Internet. You’ll never believe this!!!” and is almost certainly planned for one of those “You will not at all eat again at McDonalds after seeing this” kind of scams.

Yet, the rumors of a tape featuring her being leaked on Face book emerge to reach Ms. Lohan’s ears.

According to celebrity gossip site TMZ, which claims to have asked her closest friends about it, the celebrity denied the survival of any such video.Fascinatingly enough, even though this scam has been going approximately for at least 24 hours, the landing page is still online. So much for Face book’s crack down on spam.