Viral clickjacking ‘Like’ worm hits Facebook users

May 31, 2010 by  
Filed under Security News

Views 123 views  
FaceBook Logo FB Comments
Comments Leave a Comment

Hundreds of thousands of Facebook users have fallen for a social-engineering trick which allowed a clickjacking worm to spread quickly over Facebook this holiday weekend.


Affected profiles can be identified by seeing that the Facebook user has apparently “liked” a link:

Girl gets owned after a police officer reads her status message

Messages seen being used by the spammers include:

"LOL This girl gets OWNED after a POLICE OFFICER reads her STATUS MESSAGE."

"This man takes a picture of himself EVERYDAY for 8 YEARS!!"

"The Prom Dress That Got This Girl Suspended From School."

"This Girl Has An Interesting Way Of Eating A Banana, Check It Out!"


Clicking on the links takes Facebook users to what appears to be a blank page with just the message “Click here to continue”.

Click to continue


However, clicking at any point of the page publishes the same message (via an invisible iFrame) to their own Facebook page, in a similar fashion to the “Fbhole” wormwe saw earlier this month.



FaceBook Comments

Speak Your Mind

Tell us what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!