Over 100,000 Facebook Users Fall Victim to Italian Likejacking Attack

[Peaches]

Over 100,000 Facebook Users Fall Victim to Italian Likejacking Attack

Localized scams are gaining more ground on Facebook and the success of a recent one is proof that non-English speakers are still uneducated about such threats.

The latest attack lures Italian users with an amateur video of a young man firing a gun at the San Pietrini police in Piazza del Popolo.

The message spammed by the victims reads: "Video amatoriali degli scontri a Piazza del Popolo che riprende un ragazzo mentre tira San Pietrini alla Polizia. DICIAMO BASTA A QUESTE VIOLENZE!" The included link directs users to a page that displays a fake video player thumbnail and a fake comment stream of Italian-speaking users allegedly reacting to the footage. Clicking the play button on the video triggers a "Like" action on the behalf of users without their authorization, thus propagating the scam. This is done through an attack technique known as clickjacking which uses Web programming techniques to make a button invisible and position it on top of an innocuous looking one.

Details -http://news.softpedia.com/news/Tens-of-Thousands-of-Users-Fall-Victim-to-Italian-Facebook-Likejacking-Attack-191702.shtml