Rihanna and Hayden Panettiere masculinity video spreads Mac malware lying on Facebook

Burning on the heels of an earlier Mac malware assault dispersal via Facebook links, we are seeing one more attempt to infect Mac users on the social network – with what claim to be a sex video of celebrities Rihanna and Hayden Panettiere.


 

 

If you see post like the following on Facebook, please do not click on the links.

Hot Lesbian Video – Rihanna and Hayden Panettiere!!

One more stolen home porn video 😉 Rihanna and Hayden Panettiere

Hot Lesbian Video – Rihanna and Hayden Panettiere!!

[LINK]

Rihanna and Hayden Panettiere!!! Private Lesbian HOT Sex Tape stolen from home archive of Rihanna!


 

For those who don’t go after such things, Hayden Panettiere played the division of the cheerleader in the sci-fi TV show “Heroes”, and Rihanna is a pop star famous for her umbrella-ella-ella.

Not that you’ll get to see much proof of that if you click on the link as – on Apple Macs at slightest – you may find yourself ending up on a webpage which tries to contaminate you with malware in the form of a fake anti-virus attack.

 

 

Has a personal lesbian hot sex tape really been stolen from the home archive of Rihanna? for myself I think it’s improbable, but it’s amazing what people will consider these days (and indeed, what celebrities will get up to) so it’s no speculate that some folks might click on the link.

 

Lindsay Lohan Fake Death News

An additional celebrity to connect the “greatly exaggerated” death rumors list is “Herbie: Fully Loaded” actor Lindsay Lohan. Yesterday, the information site and encyclopedia Wikipedia page of Lindsay Lohan abruptly read the death date of the actress as July 14, 2010. The exposure of such news in one of the trusted sources surprised Lindsay Lohan fans and set the whole internet abuzz with rumors. The Lindsay Lohan fans were penetrating for the answers concerning the authenticity of the news.

 

 

The Wikipedia page of Lindsay Lohan read that the actress was active in entertainment from 1996 to 2010 and did not specify the cause of her death. The rumor was increase by one of the users who edit the supposed page of Wikipedia. The Wikipedia officials said that yesterday morning about 3 1/2 hours the Lindsay Lohan page was edited by the users and the officials blocked one of the users from editing the articles as the user’s account was being used only for “vandalism”. However, later the officials of Wikipedia distorted the details.

 

A celebrity blog reported that as there was no authentic update about the “Mean Girls” actress’ death, it was proved to be a rumor, a prank played by someone. The rumor of Lindsay Lohan’s death spread as a wild fire and in other social networking sites also users commented about her death. Even on the reputed web portals, video tribute for the troubled actress began appearing.

Another website reported that Lindsay Lohan died of drug overdose which is absolutely not true. The celebrities along with their fame earn their haters who try to harm their reputation by spreading these kinds of malicious rumors which are not only derogatory, but also condemnable.

 

Bare celebrity on LinkedIn direct to malware

A blog post by our friends at Trend Micro wedged my eye this morning, and got some of the guys within SophosLabs looking a small quicker at some of the profiles listed on the business networking site, LinkedIn. It’s astounding how many people signed-up on LinkedIn have words like “nude” and “naked” in their job title. It’s probable that some of these are genuine (for instance, the person who claims to be the Chief Nude Parachutist at a New York-based company), but many of them are not.

 

For example, I think it’s very improbable that Paris Hilton works for a firm called “company B”, and that she would want to post links claiming to be of her notorious sex video. Another celebrity who has fallen foul of a private home movie becoming public is Kim Kardashian. It seems that the hackers who have peppered LinkedIn with false profiles also believe that people will be probing for videos of her, and so they have created a page for her too.

 

 

Other names (of various levels of fame) with fake profiles on LinkedIn include Jaime Pressly, Christina Aguilera, Keri Russell, Zooey Deschanel, Lizzy Caplan, Brooke Hogan and Tila Tequila. Some of the links contained in these profiles are currently down, but SophosLabs can confirm that as recently as January 1st 2009 the malicious Troj/Decdec-A JavaScript code was being found on them, downloading further malware onto visiting computers.

 

 

It’s a shame that LinkedIn aren’t keeping a closer eye on clearly bogus profiles being shaped on their site. Certainly spammers, malware authors and other cybercriminals may be abusing the system to link to their WebPages in the hope that it will produce a higher ranking in search engines like Google.

‘Sex video’ Of Fiona Xie? You’ve been scammed

A new thread of scams on social networking site Face book has claimed its newest victim in former MediaCorp artiste Fiona Xie.

The scams, which appear more than a few days ago, lures Face book users into ‘Liking‘ a link to a page talented sex videos of the voluptuous 29-year-old. The link features a thumbnail of Xie sitting suggestively in a bathtub along with the tagline “Fiona Xie. Is she REALLY as innocent as she looks?”

 

 

Clicking on the link though leads to a survey. According to Graham Cluley, a senior technology advisor at online security firm Sophos, this is an ordinary hacking technique known as ‘click jacking‘ in which the scam artist pockets a sum for every survey finished.

By fooling the victim into innocently ‘Liking‘ the page, “chances are that you (the user) will be uncomfortable that your friends now know you were seeking for sex videos of Fiona Xie,” said Mr Cluley in a blog post.

 

 

The Xie scam is supposed to be the first of its kind involving a local celebrity. Similar ones responsibility the rounds on Face book feature Hollywood stars Justin Bieber and Rihanna individually with the tagline “People totally lost their respect for (the star’s name) after watching this Sick Video”.

Ms Xie, formerly one of Caldecott Hill’s popular ‘Seven Princesses’ and ranked by men’s magazine FHM as one of the 20 sexiest women in the world in 2009, left for Hong Kong in the same year after quitting MediaCorp for unspecified personal reasons. She could not be reached for comment for this story.

Fake Death Hoax of Kanye West

In spite of what you may have read online, Kanye West did not die in a car disaster. The rapper is just the latest celebrity to be bite by fake death rumors, which rapidly spread on Twitter. At press time, it was unknown where the rumor in progress, but some were pointing to the image board 4chan.org as the source of the phony report that West had died in a crash involving two custom cars in Los Angeles.

 

 

It quickly blossomed into e-mail chains and comment threads on Face book and Twitter. Computer security blog Sophos.com track the origins of the scam; tie it to hackers who worn the rumor to push the false reports to the top of Internet search engine results. By Wednesday morning (October 21), “Kanye West died” (and variations of the phrase) was one of the most-searched topics on Google Trends. At the same time as a spokesperson for West could not be reach for comment at press time, the rapper’s girlfriend, model Amber Rose, tweeted, “This ‘RIP Kanye West’ topic is not funny and it’s NOT TRUE! He has people like me and his family that love him very much. …

 

 

It’s in extreme poor taste to have that as a trendy topic. It’s totally disrespectful to make up a story like this we’re all human … and we all make mistake and to say an important person died cuz of a mistake is ridiculous. You wouldn’t want somebody to say that about you.” The fake news story claims that “a bizarre car crash in Los Angeles concerning two luxury cars early this morning  rapper Kanye West dead, a second injured, a third arrested for gross vehicular manslaughter and a fourth person was detained by police. A Los Angeles Police Department officer witness the wreck and saw a red Ferrari and a white Porsche ‘spinning out of control’ on Jamboree Road between Bison Avenue and East Bluff Drive.”

 

 

The story goes on to provide a seemingly detailed account of the wreckage and injuries, complete with quotes from an LAPD lieutenant on the scene. It’s probable that it was timed to exploit the attention West got earlier this week when the bizarre short film called “We Were Once a Fairytale” he created with “Where the Wild Things Are” director Spike Jonze, was briefly posted on West’s blog, then taken down with no explanation. The fake death reports are just the latest to spread like viral wildfire this year, following on the heels of similar rumors about celebrities Jeff Goldblum, Matt Damon, Natalie Portman, Emma Watson, Justin Bieber, Lil Wayne and Miley Cyrus.

Osama bin Laden leaked video scam on Face book rises yet again

An original version of the variety of Face book scams we have seen since the bereavement of Osama bin Laden has emerged. Naked Security reader Sampath send us a tip-off about the newest dissimilarity he had seen of a viral scam that poses as a video of the killing of Osama bin Laden:

 

OSAMA KILLING REAL VIDEO LEAKED

OMG! Real video of Osama Bin laden being killed. Video leaked by wiki leaks. Watch it before it gets deleted.

 

A link in the message may, at first look, emerge to point to the YouTube website but in detail points to a similar-looking Indian domain name ending in “.in”. If you make the fault of clicking on the link you are taken to a third-party webpage, which poses as a security confirmation check from YouTube.

 

 

Rather why anybody would imagine that typing in the words “real video” is any form of security verification is further than me.

But what’s occurrence here is that when you submit the so-called CAPTCHA text you are without knowing publish the message to your own Face book wall. This spreads the message virally to your Face book friends, and helps spread the scam additional on behalf of the bad guys.

 

 

The scammers create their money by tricking you into taking an online survey. They earn charge for each person they manage to complete it, and you might be the sort of person who is tempted to answer the survey in the belief that you’ll get to see a video of the Osama bin Laden being killed.

Keep in mind – the real YouTube would never ask you to complete an online survey before watching a video, and that scams like this are rife across Face book. As long as Face book users keep falling for scams like this, they’ll carry on being a problem.

 

 

At the time of script this latest iteration of the Osama bin Laden Face book scam appear to have been eradicated. But I wonder how long before a new variant arises?

Face book scam –“Twilight Breaking Dawn”

Face book users are finding themselves tagged in their online friends’ photo albums, in an attack seemingly under attack at fans of the “Twilight” teen leech romance movies. Following an attack against photo albums using an image of a Playboy-style bunny girl, scammers are now pretending to link to a game promoting the upcoming movie “Twilight Breaking Dawn” starring heart throbs Robert Pattinson and Kristen Stewart as the starcrossed lovers Edward Cullen and Bella Swan.

As well as Face book photo albums, users are also being tricked into “Liking” the scam links.

 

Play Twilight: Breaking Dawn

Be the first of your friends to play the awesome new Twilight game on Face book!

 

If you click on such a link then you will be taken to a Face book page which to all intents and purpose appear to be promote an online game, being used to market Twilight Breaking Dawn. But if you click on the button marked “Play Now” then you will be click jacked into saying you “Like” the link, thus spreading the link virally to your Face book friends.

 

If you’re running a protection against click jacking, such as Firefox add-on No Script, then you will be warned – but most people are probably unaware that the page has secretly claimed that they like the game, even though no game has yet been played! The scam doesn’t end there, however, as that would simply spread the link without earning any money for the ne’er-do-wells behind it. Users are then presented with a dialog, asking them to grant permission for a third party application to access their Face book account, and post messages, updates and photos to their wall.

 

Of course, if you’re a fan of “Twilight” you will quite possibly grant permission without thinking. The only problem being that this isn’t a legitimate application request, but being done by a rogue app which wants to make money out of your devotion to the works of Stephanie Meyer’s series of novels.

Predictably, with the ability to now post to your Face book account, the scammers now present the final piece of the jigsaw: an online survey which earns them affiliate commission for each person who completes the questionnaire. You will note that the survey deliberately presents itself in a convincing Face book style, which may trick some users into believing that it is legitimate. It seems that fans of Twilight are only too easy pickings for Face book scammers, judging by the large number of reports from affected Face book users we are seeing today.

Angelina Jolie, Nicole Kidman, Natalie Portman Secret Scams


Want to see naked pictures of your favorite Hollywood actresses? It could cost you an expensive trip to your local computer repair shop if you do.

Fake email claiming to offer nude photographs of Angelina Jolie, Nicole Kidman, Natalie Portman, Milla Jovovich and pixilated videogame babe Lara Croft are behind 80 per cent of computer viruses last month, according to experts. For, though claiming to contain shocking pictures of female celebrities, the emails, once opened, install a malicious root kit.”These emails are masked as pornographic content, tempting the unwary into opening a file on their Windows computer which will install a root kit and download further malicious code from the internet,” said Graham Cluley, senior technology consultant for Sophos.

 

 

“This kind of social engineering trick is nothing new – in fact it has been used so often by cybercriminals that it from time to time feels like it’s been around since the days of the silent movies.”However, that hasn’t stopped it from being an effective way to fool many people into running code designed to allow hackers to break into computers. IT security and control firm Sophos is influence computer users to think before opening unsolicited email attachments following the widespread spam campaign.

The emails, which typically have an attached, file called amazing.zip or shocking.zip.

Mr. Cluley said: “The best way to defend you is to practice safe computing. That means not only running an up-to-date anti-virus, security patches and firewall – but also exercising caution over what programs you decide to run on your computer.”You should always think twice before opening a file that unexpectedly arrives in your email inbox.”

 

 

“Root kits are software frequently used by third parties – usually a hacker – to hide other software and processes using advanced stealth techniques.”Malicious code, such as spyware and key loggers, can be invisibly cloaked from detection by conventional security products or the operating system making them hard to detect.”Hackers use root kit technology to maintain access to a compromised computer without the user’s knowledge, so it’s important to be properly defended from these sort of threats.”

 

 

If you receive an e-mail (even from a friend) with an attachment promising video of starlets like Angelina Jolie or Natalie Portman wearing nothing but their pride, do yourself a favor and don’t open it: It’s a virus. Amazingly, 80 percent of reported computer infections last month came from this single source. The e-mails contain a message along the lines of, “Shocking video of nude Angelina Jolie,” and carry a single attachment named either amazing.zip or shocking.zip. The attachment purports to contain the titillating peep show, but what it actually includes is a piece of malicious software called a rootkit.

 

A root kit is basically computer code that installs itself in a protected area on your machine’s hard drive. Once there, it’s very difficult to detect and remove. Frighteningly, it can do just about anything it wants, including monitoring anything you type on your keyboard, rifling through your files for confidential information, participating in attacks against other computers and, of course, e-mailing itself to all of your contacts.Sending your friends a virus is no way to win their admiration, but sending them a virus that proves you’re the sort of person who would open an attachment like shocking.zip, well, that could do some serious long-term harm to your social status.

 

If you suspect your computer is infected with a virus, or you’d like to know how to spot the threats currently spreading themselves over the Internet, anti-virus software maker McAffe is a great resource. Granted, this a company trying to sell you a product, but its site offers free information on current viruses and free tools for removing some of the more sinister ones.

Miley Cyrus Sex Tape Hoax scattering On Face book

In the newest repayment of “Watch your most beloved/hated pop star do malicious things by clicking on this Face book link!” an supposed Miley Cyrus sex tape is circulating on Face book, but the entire thing is (surprise!) a scam. Let us know if you’ve seen this on your News Feed.

It was a hypothetical sex tape connecting Lindsey Lohan which got people rsvp-ing to actions that would link them to the video; of course, in reality the whole thing was about making you whole sale forms online, and the video didn’t exist. Then, it was Justin Bieber’s turn, and the promise to see the teen pop star during a “happy” moment actually spread spam and malware to your Face book friends.

Now, it appears that a new scam is spreading on Face book, though we still have to see it appear in our News Feeds. According to Sophos, a status update that goes, “omg Miley Cyrus sex tape [plus link]” is captivating over some legitimate Face book client accounts. It is indistinct how the users’ accounts are being compromise at the second, although the website that the link takes you to is clearly nasty. Do not click on it!

Have you seen this on your page/news feed?