Slashdot Mirror


Clickjacking Worm Exploits Facebook "Like" Feature

An anonymous reader writes "For the last 24 hours, a series of attacks have exploited Facebook's 'Like' feature through a clickjacking vulnerability. Using subjects such as 'This Girl Has An Interesting Way Of Eating A Banana, Check It Out!' hackers have spread an attack that links to web pages that use invisible iFrames to trick users into saying they like the content. Users are presented with a innocent-seeming web page that says 'Click here to continue,' but clicking at any point on the page publishes the same message to their own Facebook page. Security blogger Graham Cluley says that hundreds of thousands of Facebook users have been hit, and offers advice on how to clean up affected Facebook profiles.

3 of 124 comments (clear)

  1. Link? by Ecuador · · Score: 5, Funny

    I hate posts without proper links...
    So, who will post the direct link to the girl with an interesting way of eating a banana?

    --
    Violence is the last refuge of the incompetent. Polar Scope Align for iOS
  2. Re:Advice by bfields · · Score: 5, Insightful

    Here. I'll offer the simplest advice you can get: Stop clicking on stupid shit.

    Just by doing that, internet/computer security would be vastly improved.

    Eh. The scammers use "stupid shit" as the bait because that's what works. If "intelligent shit" started attracted the most clicks, they'd start using that instead.

    Once a single mouse click on an infected link is enough to propagate the link, it's already game over--the choice of bait is a detail.

  3. Re:Advice by vlm · · Score: 5, Funny

    Eh. The scammers use "stupid shit" as the bait because that's what works. If "intelligent shit" started attracted the most clicks, they'd start using that instead.

    OK I'm all confused now. Just answer the question, is "Why Apple Is So Sticky" safe to click on or not?

    --
    "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger