Global websites Press About us Contact us
Products
Solutions
Support
Security
Partners
Naked Security
Skip to contentSearch for:
Archive by date | author | category
Send us a tip | Subscribe by RSS | Email
malware spam social networks data loss law & order apple podcast video more about
2862
599
3590
Share
Fiona Xie sex videos clickjack
Facebook users
WordPress.com targeted by DDoS attack
Beware
Top 10 Profile stalkers on
Facebook and Twitter
Hi there! If you`re new here, you might want to subscribe to the RSS feed for updates. X
by Graham Cluley on March 3,
2011 | Comments (12)
FILED UNDER: Social networks, Spam
Following the "11.6 hours" scam which flourished on Twitter yesterday, you would hope that everyone would be wise to the threat of allowing unknown
apps unfettered rights to post to your social networking
account.
However, I wouldn`t be surprised if we see more and more scams which attempt to increase their chances of success by targeting both
Facebook and Twitter users at the same time.
For example, here`s a scam which is spreading virally on
Facebook right now.
Cool,man I cannot believe that you can see who is
viewing your
profile. ! I just saw my
top 10 profile stalkers and I am SHOCKED that my Ex is still
viewing my
profile :O ! You can see WHO VIEWED YOUR
PROFILE here--[LINK]
If you click on the
link you`ll ultimately share the
link from your own
account and be required to take a revenue-generating survey scam. We`ve discussed these sorts of scams many
times before, of course, and provided details of how to clean-up your
Facebook profile afterwards.
Meanwhile, earlier
today, a very similarly phrased scam was spreading on Twitter with the same intention of making money for the bad guys.
I just viewed my
TOP 10 Profile STALKERS - [LINK]
The good news is that the links being used by this scam on Twitter appear to have now been blocked by bit.ly (although they may, of course, spring up again under a different guise). If you did manage to reach the destination that the scammers wanted, however, you would have been urged to connect a third-party
application with your Twitter
account.
Giving permission to such an
app is just what the scammers want, and the
app doesn`t waste any time exploiting the opportunity to post to your Twitter
account - spreading its
link even wider.
Meanwhile, the promise of discovering who are your
top 10 profile stalkers on Twitter might be enough to tempt you into taking a survey which earns money for the scammers.
Needless to say, you never do
find out who has really viewed your
Facebook page or Twitter
profile - but you have helped put some cash in the pocket of the scammers.
Don`t encourage them to distribute scams like this, and always exercise caution about which third party
apps you allow to connect with your social networking accounts.
If you`re on Twitter and want to learn more about threats, be sure to follow Naked Security`s team of writers. Meanwhile,
Facebook users would be wise to join the Sophos
Facebook page, where we give early warning about new threats.
inShare
134
Tags:
Facebook, rogue
application, Scam, Spam, Survey Scam, Twitter
Fiona Xie sex videos clickjack
Facebook users
WordPress.com targeted by DDoS attack
About the author
Graham Cluley is senior technology consultant at Sophos. In both 2009 and 2010, the readers of Computer Weekly voted him security blogger of the year and he pipped Stephen Fry to the title of "Twitter user of the year" too. Which is very cool. His awards cabinet bulging, he was voted "Best Security Blogger" by the readers of SC Magazine in
2011. You can contact Graham at
gc@sophos.com, or for daily updates follow him on Twitter at @gcluley.
View all posts by Graham Cluley
Related Posts
Thousands of Twitter users hit by classic
Facebook scam
Photo tagged as a
Facebook bunnygirl? Beware viral scam
Openmouthed?
Facebook users gawp at new incarnation of survey scam
Twitter users are not smarter than
Facebook users -
Profile views scam spreading fast
Comments (12)
Sort by: Date Rating Last Activity
2
Armaan ·
10 weeks ago
you
people are just great. Keep it up, guys.
Report
Reply
6
Ross ·
10 weeks ago
Why doesn`t
Facebook detect and block these scams immediately? Are they getting a piece of the ill-gotten proceeds?
Report
Reply
0
Tyler ·
10 weeks ago
If you guys ever take notice at who is serving these ads... 99% of these survey spammers are from CPALead.com. It`s surprising no one has
looked into that - why is that affiliate program not making an effort to reduce this behavior? Seems like they are encouraging it instead.
Report
Reply
2 replies · active less than
1 minute ago
1
Graham Cluley ·
10 weeks ago
You may
find this of interest:
http://nakedsecurity.sophos.com/2010/10/22/facebook-sue...
Report
Reply
0
Tyler ·
10 weeks ago
Graham,
If you take note of the case - it is fully resolved and the defendant only paid an $85,00 fine. That`s nothing.
Is this just? I don`t think so. Just saying.
Report
Reply
0
@WeboGerbil ·
10 weeks ago
Yeah, I tried, but blocked it when I saw that it wanted me to do a survey...
Report
Reply
1
Scott ·
10 weeks ago
All these scammers come from CPALead - you can buy the scripts which do this for about $30, and they`re regularly updated. I was a member of CPALead, just as a bit of blackhat research and
people were earning upwards of $10,000 per DAY (people can announce their earnings via chat, and the earnings are pulled from the CPALead database). They all share their techniques and actively help each other pull off these survey scams.
After
Facebook changed some of their algorithms for detecting spam (and introducing the requirements for verifying accounts)
people found it much more difficult to actually do it. But then
people pop up selling hundreds of
Facebook accounts with verified details and a full
profile for a couple of dollars a pop.
Report
Reply
1 reply · active less than
1 minute ago
0
Scott ·
10 weeks ago
Just a bit more information, there are two major competing
apps, one called TinieApp and the other is by a guy who calls himself
FB Expert.
I`m surprised
Facebook haven`t detected footprints for these scripts (I have both scripts and the code they output is easily detectable).
The image you have in your blog article for the "Anti Spam survey" is a default image that comes with one of these
apps (I`ve forgotten which specific
app it is). The reason why CPA Lead is not cracking down on these guys is because they are making tens of thousands of dollars from them every day. Their recent party in Las Vegas where they`re raffled off the owners Maserati is testament to that.
This is all just the beginning of the spam chain, once the survey is filled in all the data that has been collected is used by unscrupulous individuals/companies to spam and get
people to sign up to premium services which are very hard to unsubscribe from. These companies are paying up to $3/$4 per survey filled - they wouldn`t be doing this if they weren`t making significant gains on that investment.
I have to be honest, I did look into all of this as a way to make money, but I couldn`t morally do it - I just imagined my mother filling in a survey and getting spammed to death while losing a lot of money in the process
Report
Reply
0
@martijn_grooten ·
10 weeks ago
Scam is still going round on Twitter -- someone I follow was infected tonight. As the scam was using bit.ly links, I told them on Twitter @bitly. The malicious links had stopped working within
ten minutes! Was very impressed.
Report
Reply
0
Briana · 4 weeks ago
I actually see the
top ten stalkers post via mobile, but if I go in via web on my home pc that same post is not showing up. I am quite well versed on these type of scams so I have no idea how it`s showing up on my mobile
profile page but the online page it isn`t there.
Report
Reply
1
Tatianna · 4 weeks ago
I really love this blog, I read it all the time. I actually got this spamming
link on my
facebook and I couldn`t
remove it at the beginning. Someone tagged me and it was stuck. I finally was able to get rid of it. When is all these spammers are going to go away. I dream of a day, where spammers and virus creators will
find other things to keep them busy.
Report
Reply
0
Suzzie ·
1 week ago
I got caught!!! what do i do now?
Report
Reply
Post a new comment
Comment as a Guest, or login:
Login to IntenseDebate
Login to WordPress.com
Login to Twitter
Name Email
Displayed next to your comments.
Not displayed publicly.
Submit Comment
Popular
Recent
Related
Thousands of Twitter users hit by classic
Facebook scam
Photo tagged as a
Facebook bunnygirl? Beware viral scam
Openmouthed?
Facebook users gawp at new incarnation of survey scam Twitter users are not smarter than
Facebook users -
Profile views scam spreading fast Profile Spy rogue application spreads virally on Twitter Video posts More videos this way Sony, Facebook controversy, FBI bust, Armenia cut off - 90 Sec News - April 2011
Mother`s Day search terms lead to Mac rogue security software
IE6, Tsunami scams, Pwn2own, RSA hack, Epsilon breach - 90 Sec News - March 2011
Malware, HBGary owned, OS X Trojan, Win 7 SP1 - 90 Sec News - Feb 2011
Hacktivism, Apple App Store, Vodafone and Facebook - 90 Sec News - Jan 2011
Twitter Feed
No data is available.
EnglishDeutschEspañolFrançaisItaliano
© 1997-2010 Sophos Ltd. All rights reservedLegalPrivacyJobsRSS