The AVG Web Threat Research Group has put together a video on a Facebook clickjacking scam we recently found on Amazon's cloud site http://s3.amazonaws.com/.
The "Big Baby Born Amazing Effects" scam, which purports to offer a webcam view of a birth, spreads through Facebook posts from those who have fallen for the trick. Curious Facebook users who click on the links to the video are instead led to scam that offers such incentives as $1,000 credit cards, $250 Wal-Mart gift cards, or recurring cell phones fees.
Other Facebook scams we've seen recently on Amazon's cloud site:
"Dad walks in on Daughter.. EMBARRASSING!"
"Osama Shot Down Video"
"Bin Laden EXECUTION Video!"
"Paste The Code Into Your Browser's Address Bar Above. Then Hit Enter!"
During our research we approached Amazon S3 to report the incident and ask that the malicious content be removed to protect users. We were told to fill out an online form to report abuse. Unfortunately the terms on the form say that the content owner should be notified to remove the content. Link Scanner detects these ClipJacking (aka LikeJacking) scams and AVG users are protected.
Leave a reply
