Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

Facebook scams popping up that exploit Norway tragedy

So-called "clickjacking" scams add fake posts on users' news feeds

Facebook scams are popping up from people looking to exploit Friday's bombing and shootings in Norway. Users should be careful not to click on links they are not familiar with.

The issue was raised in a blog post by security software provider Websense. The viral exploit currently appears to be infecting one user every second.

The "clickjacking" scam adds fake posts on users' news feeds, encouraging them to click on infected links with the lure of hot news items and disaster footage. Most recently we've seen similar news-related Facebook scams using the Casey Anthony trial as bait and even adding in Facebook Chat as an additional lure.

Social networking, by its very nature, is viral and makes large networking sites like Facebook a hotbed for malicious scammers. AVG reported last fall that of the nearly 20,000 malicious pages on the top social networking sites, more than half were on Facebook, and the majority of the rest were on video-sharing site YouTube.

Videos are particularly effective for scammers, Websense says, but even breaking news stories within search results can be unsafe. Searches for current news pose an even higher risk than searching for pornography or other objectionable content on the web.

The moral of the story? When it comes to breaking or hot news items at least, we should still stick with clicking only on trusted news organizations' links. Beware of those Facebook feeds.

Follow Melanie Pinola (@melaniepinola) and Today@PCWorld on Twitter

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: AVG Technologies AU, Facebook, Websense
References show all
Comments are now closed.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: online security, hackers, Internet-based applications and services, social networks, social media, internet, websense, youtube, Facebook
Latest Blog Posts
Whitepapers
  • Spear-Phishing Email: Most Favored APT Attack Bait
    This research paper presents findings on APT-related spear phishing from February to September 2012. We analysed APT-related spear-phishing emails collected throughout this period to understand and mitigate attacks. The information we gathered not only allowed us to obtain specific details on spear phishing but also on targeted attacks. We found, for instance, that 91% of targeted attacks involve spear-phishing emails, reinforcing the belief that spear phishing is a primary means by which APT attackers infiltrate target networks.
    Learn more »
  • Clearing the Clouds for Midmarket Businesses
    Cloud computing promises to help midmarket companies reduce cost and complexity in the IT equation – and gain the flexibility and agility they need to thrive. Yet charting a clear course to the cloud isn’t always easy. In this paper, we aim to clear the clouds. We examine different cloud computing models, discuss the types of requirements that each can best address, and consider what midmarket businesses should look for in a cloud solutions provider.
    Learn more »
  • Six Reasons to Empower Your SharePoint Citizen Developers
    More and more business applications are being created by “citizen developers” - end users who are not IT developers but who create solutions for themselves and their groups. This white paper explores six reasons to embrace citizen development in an intelligent way that minimises risks and maximises the return on your SharePoint investment. Read now.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments