Vulnerabilities / Threats
10/2/2009
01:25 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Beware Hijacked Social Networking Accounts, FBI Warns

Social networking sites are becoming a more popular attack vector for cybercriminals because people trust those they believe to be friends.

Think twice before wiring money to help a Facebook friend who claims to be in trouble in a foreign country.

Marking the commencement of National Cybersecurity Awareness Month, the Federal Bureau of Investigation (FBI) on Thursday warned that there's been an increase in hijacked social networking accounts and that cybercriminals are using these accounts to defraud victims' friends.

Since 2006, there have been 3,200 reports of account hijackings, according to the Internet Crime Complaint Center (IC3).

Such scams often begin with spam messages.

"When opened, the spam allows the cyber intruders to steal passwords for any account on the computer, including social networking sites," the FBI said. "The thieves then change the user's passwords and eventually send out distress messages claiming they are in some sort of legal or medical peril and requesting money from their social networking contacts."

Facebook's security blog includes a transcript posted in August of a chat conversation in which this very scam is played out.

"Pretending to be Derek's friend Jill, the scammer tells Derek that she was mugged at gunpoint in London, and that she needs him to wire her $890 immediately," Facebook explains. "Derek becomes more and more suspicious as the conversation progresses and ultimately realizes that the person he's talking to isn't his friend, and that the story he's being told is a lie."

Another common scam, the FBI said, involves phishing spam that presents a fake notice about some issue requiring attention, such as a terms of service violation, account expiration, or unexplained account activity. Messages of this sort often seek to prompt recipients to click on a link that leads to a malicious site and to provide personal information or account details.

The reason that cybercriminals seek to abuse social networking accounts is that messages from friends have an appearance of legitimacy.

As if to underscore the FBI's concern, Roger Thompson, chief of research at AVG Technologies, reported in a blog post on Thursday that his company had detected a series of identical Facebook profiles, differentiated only by profile names, set up to distribute fake anti-virus software through a link purporting to be a home video.

The FBI advises: that users check their privacy settings on social sites to make sure they're not exposing too much information; being selective about friends on social sites; disabling unused sharing options; being careful about links posted to social sites; and reviewing the security settings and procedures at social sites.


InformationWeek has published an in-depth report on smartphone security. Download the report here (registration required).

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: "I've seen worse.  Last week Tim had a dragon."
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.