Clickjacking Scam Hits Facebook
Cyber scammers have launched a new clickjacking worm on the social networking site Facebook. The attack attempts to trick users into using the Facebook “Share” feature without telling the user the information will be shared.
Users are offered the opportunity to see a page containing “Top 10 Funny T-Shirt Fails ROFL,” according to Sophos researchers.
“Once the page is loaded, it loads the appropriate tab and grabs the malicious script from an external domain that silently forces the user automatically share the page on their profile,” writes Onur Komili, a researcher with SophosLabs. “If you happen to be one of the people who fell victim to this scam be sure to click the “Remove” option as seen in the image above to clear the content from your profile. This will help prevent friends of yours from being compromised and possibly falling victim to the scam.”
Related posts:
