you're reading...

Facebook Script Kiddie joy

What is it with the “Malware made easy” schtick that is roaming all media at the moment?

Here’s an article from The Register[1] on a Facebook tool that makes point and click Scams, malware or whatever you want simple. Most common though are survey pushes that generate revenue (via the clicks made by the victims).

The original blog entry[2] is from WebSense. Well written simple description of how these things look and work.

It was only a matter of time before someone started selling hacking tools. But it is disappointing. The only real way around this kind of attack is to close-book the original app: no Starfleet Commander, no Quizzes, no Mafia or any other themed game.
But we all like and love all these. The latest utter scam, Facebook doesn’t allow it, are the “who read my profile” apps. Just leave them well alone! I myself have found myself within a click of something similar. It’s jet so hard to tell genuine from malware.

You can’t even trust recommendations from friends as if their profile is hacked then the app itself could post promotions, apparently from Bob.

For all of the above reasons, even taking into account the huge benefits, I cannot recommend any system that includes “extension” that do not have a clear vetting procedure. Everyone, there is a reason why Apples iStore is so beloved of it’s users – other vendors take note!

Be cautious out there.

[1]The Register (Facebook Exploit Toolkit) 08/02/2011
[2]WebSense 08/02/2011

– Posted using BlogPress from my iPhone

About harlekwinblog

"Thoughts of an idle mind." Information Security professional.


No comments yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: