“Cheerleaders Gone Wild” – Another ClickJacking Scam Hits Facebook

Not too long ago we reported about a spam clickjacking the Facebook “Like” button. The spammer used a genius technique of hiding the “Like” button behind a line of text that uninformed users would mistake for a normal link. By doing so the users unknowingly “Liked” the spam page.

Another round of similar scam has been spreading virally over Facebook. When clicked, users are tricked by a warning message claiming the page they are about to access contains content “inappropriate for some users” and that it “may contain shocking graphics, nudity or disrespect other individuals.” The warning message is designed to look like an official warning from Facebook.

It’s during the fake verification when the user clicks to “Confirm” their age, they also unknowingly click the “Like” button hidden behind the “Confirm” button. This signs you up for the “Cheerleaders Gone Wild” page, and invisibly you are confirming to “Like” other pages such as, “Funniest Videos On the Web” and “Free ringtones every day.”

Image Credit: Sophos

[Security Week]

Related Posts

• “Smoking Hot Bartenders” – A Spam ClickJacking The Facebook Like Button
  "Smoking Hot Bartenders" is a recent spam spreading like wild fire on Facebook. Obviously the site is spam where a user is required to fill in a form (i.e. offer) in order to access "Smoking Hot Bartender" pict...