Tuesday, November 15, 2011

Clickjack attacks plaguing Facebook


A rash of clickjacks has led to the spread of violent and pornographic images across Facebook in the last day, causing outrage among users and raising concerns that it is part of an attack by a faction of the hacker group Anonymous.
The attack demonstrates the vulnerability of the service to social engineering attacks that take advantage of Facebook's application framework. It uses a link disguised as a seemingly innocuous news story as bait—made more prominent thanks to the recent changes Facebook made in how it displays users' timelines. Once the bait is clicked, it uses the victim's news feed to spread the offensive images to followers, and further propagate the clickjack bait.
Some of the images spread by the attack, including images of Justin Beiber edited into sexual situations and photos of animal cruelty, are characteristic of the ____ site's "b" discussion board where the ______ group was born, Sophos senior technology consultant Graham Cluely reported in the Naked Security blog. Previously, messages purportedly from _______ had threatened to take down Facebook on Guy Fawkes Day, November 5, in protest over Facebook's weak privacy protections—an attack that failed to materialize on that date. The attack does come, however, on the heels of Facebook reaching an agreement with the Federal Trade Commission to alter its policies to make all future changes to privacy settings "opt in."
No one purporting to be associated with ______ has taken credit for the clickjack so far, but it is driving users away from the service.

10 comments:

  1. That's pretty horrible to hear about Facebook going through those troubles, thankfully I've managed to avoid getting the virus/whatever it is so far! Great post as always buddy.

    ReplyDelete
  2. Well... at least the motivation seems somewhat just. Although the execution is, well...

    ReplyDelete
  3. ah... so that's why my philosophy teacher posted photos of naked girls on his FB wall LOL~ ^_^

    but seriously this is really a problem. I all these weird nude and offensive posts and the person who supposedly posted these things doesn't even have a clue!

    Fix this facebook!

    ReplyDelete
  4. I've seen this all over... it's usually the dumbest kind of people that click on those third party javascript apps.

    ReplyDelete
  5. Glad I no longer have a Facebook, there are easier ways to look at porn. jk

    ReplyDelete
  6. What a world we live in! (also I agree with Sub-Radar-Mike!)

    ReplyDelete
  7. I've seen that on a bunch of people's profiles.

    ReplyDelete
  8. Is it bad that I find this kind of funny?

    ReplyDelete