The Latest in IT Security

Amazon cloud site used for Facebook clickjacking

24
Jun
2011

The AVG Web Threat Research Group has put together a video on a Facebook clickjacking scam we recently found on Amazon's cloud site http://s3.amazonaws.com/.

The "Big Baby Born Amazing Effects" scam, which purports to offer a webcam view of a birth, spreads through Facebook posts from those who have fallen for the trick. Curious Facebook users who click on the links to the video are instead led to scam that offers such incentives as $1,000 credit cards, $250 Wal-Mart gift cards, or recurring cell phones fees. 

See this video

Other Facebook scams we've seen recently on Amazon's cloud site:

"Dad walks in on Daughter.. EMBARRASSING!"
"Osama Shot Down Video"
"Bin Laden EXECUTION Video!"
"Paste The Code Into Your Browser's Address Bar Above. Then Hit Enter!"

During our research we approached Amazon S3 to report the incident and ask that the malicious content be removed to protect users. We were told to fill out an online form to report abuse. Unfortunately the terms on the form say that the content owner should be notified to remove the content. Link Scanner detects these ClipJacking (aka LikeJacking) scams and AVG users are protected.

Leave a reply


Categories

SUNDAY, AUGUST 01, 2021
WHITE PAPERS

Mission-Critical Broadband – Why Governments Should Partner with Commercial Operators:
Many governments embrace mobile network operator (MNO) networks as ...

ARA at Scale: How to Choose a Solution That Grows With Your Needs:
Application release automation (ARA) tools enable best practices in...

The Multi-Model Database:
Part of the “new normal” where data and cloud applications are ...

Featured

Archives

Latest Comments