OMG mother went to jail" Facebook scam spreads virally
Sophos warns users against entering personal information to view pictures and videos
The messages which are being posted on users' Facebook pages read "OMG!! Guys, you have to see this: This mother went to jail for taking this pic of her son!"
Similar to the recent "Never Gonna Drink Coca-Cola Again" scam, the attack encourages users to "like" a Facebook page, tricking them into sharing the link on their wall before they are able to access the image.
When users have completed these necessary steps, a fake security check then appears asking users to take part in an online survey.
Sophos has produced a video, demonstrating the attack, which journalists are welcome to embed on their websites: http://www.youtube.com/watch?v=bGBlfM9e0Js
The scammers make money from directing traffic to the online surveys, which gather personal information. In some cases the surveys claim that participants will be sent a free iPad as a prize for participating.
"I really feel like despairing that the general public will ever learn to avoid dodgy links like this," said Graham Cluley, senior technology consultant at Sophos. "Criminals these days don't need to spam out their scams - they can rely on the public to spread them for them. Far too many people are prepared to endorse and share links on Facebook without properly thinking about what they are doing. In this case, they're doing it before they have any clue about what lies behind the page."
Sophos demonstrates in the video how Facebook users that have been affected can view the recent activity on their news feed and delete entries related to the offending links. In addition, impacted users should view their profile, click on the 'Info' tab and remove any of the offending pages from the "Likes and interests" section.
More information about the attack, including the video, can be found on Graham Cluley's blog at: http://www.sophos.com/blogs/gc/g/2010/07/21/omg-mother-jail-facebook
Sophos's Facebook group, which warns of emerging threats on Facebook, can be found at: http://www.facebook.com/pages/Sophos/28552295016
Press releases you might also be interested in
Weitere Informationen zum Thema "Sicherheit":
Grundlagen der Web Application Firewalls
Eine Web Application Firewall (WAF) überwacht und schützt Webanwendungen, die über das HTTP-Protokoll arbeiten. Eine WAF arbeitet regelbasiert, um Angriffsarten wie zum Beispiel Cross Site Scripting (XSS), Angriffe oder SSL-Injections abzuwehren oder aktuelle Applikationen vor neu entdeckten Sicherheitslücken mittels virtueller Patches zu schützen.Weiterlesen