“Likejacking” Takes Off on Facebook

first_imgsarah perez Guide to Performing Bulk Email Verification Security researchers are warning of the newest Facebook threat, something they’re calling “likejacking,” a Facebook-enabled clickjacking attack that tricks users into clicking links that mark the clicked site as one of your Facebook “likes.” These likes then show up on your profile and, of course, in your Facebook News Feed where your friends can see the link and click it, allowing the vicious, viral cycle to continue. According to security firm Sophos, hundreds of thousands of users have already fallen for this new “likejacking” trick thanks to the clever and tantalizing linkbait the spammers use to entice people to click their links. For example:“LOL This girl gets OWNED after a POLICE OFFICER reads her STATUS MESSAGE.”“This man takes a picture of himself EVERYDAY for 8 YEARS!!”“The Prom Dress That Got This Girl Suspended From School.”After clicking through on a link, victims don’t get to see the promised content, but rather a blank page reading “click here to continue.” This page contains the clickjacking worm (Troj/Iframe-ET) embedded via an invisible link. Click anywhere on the page and the message is posted to your profile and News Feed, allowing the worm to further its spread. This particular exploit is made possible by way of Facebook’s new like button and its associated developer code. According to the like button documentation, the buttons can be customized with meta data that includes things like the title of the Web page, the name of the website and the URL of a picture for the page. By customizing these fields, spammers and hackers can easily create links that are, in fact, malicious “likes.” Told You SoThe popularity of this particular attack vector is not surprising. Soon after the launch of the Facebook like button, we reported on its potential as a threat, noting how incredibly easy it is to create like buttons that link to anything on the Web – even pages you have never visited. It was only a matter of time before spammers and hackers started exploiting this weakness for their own purposes. (Frankly, we’re surprised it took this long.) The problem has to do with the overly simple way Facebook has implemented the “like button” feature. Non-developers can plug a URL into a wizard that generates code that can be copied and pasted anywhere on the Web. Like buttons created this way or manually, via handwritten code, will function properly even if they point to a webpage that’s on a different domain from the page where the button is being hosted. Kyle Bragger, a Web entrepreneur who just launched Forrst, an online community for developers and designers, warned Facebook users of “like fraud” back in April by way of a personal blog post. To circumvent potential likejacking attempts such as these, he created a Facebook “like” bookmarklet that safely “likes” the page you’re on, allowing you to feel secure that you’re actually liking the real thing and not some shady linkbait. (Or likebait, if you will). If you’ve been hit with this likejacking attack, the best you can do is remove the like from your profile and delete the post from your News Feed. You might want to apologize to your friends with a Facebook status update, too. Facebook is Becoming Less Personal and More Pro… Related Posts center_img The Dos and Don’ts of Brand Awareness Videos Tags:#Facebook#NYT#security#social networks#web A Comprehensive Guide to a Content Auditlast_img read more

Two troopers of 18 Assam Rifles killed in Manipur blast

first_imgTwo troopers of 18 Assam Rifles were killed and six others injured in a bomb blast in Manipur’s Chandel district near the India-Myanmar border on Monday, sources in the police said.Suspected insurgents detonated a remote-controlled bomb on the roadside near the District Collectorate at 6 a.m. and Rifleman Indra Singh was killed on the spot, while Rifleman Sohalal died of his injuries within hours.The troopers, along with armed guards, were on their morning jog. Additional forces from neighbouring districts have been rushed to launch a massive combing operation.No outfit has yet claimed responsibility for the attack.last_img

Relief package inadequate, says Uddhav

first_imgCalling the ₹10,000-crore relief package announced by Chief Minister Devendra Fadnavis for farmers hit by unseasonal rain “grossly inadequate”, Shiv Sena chief Uddhav Thackeray on Sunday demanded that the government provide ₹25,000 per hectare as compensation to farmers without any conditions attached.The Sena chief, who toured parts of Aurangabad district to assess crop damage, parried questions on the tussle between the Bharatiya Janata Party (BJP) and the Sena over government formation, merely saying the people would come to know soon enough if his party would be in power.“The damage to crops is so extensive that the government must immediately give recompense of at least ₹25,000- ₹50,000 per hectare for these farmers… nothing will happen in the ₹10,000 crore package announced,” Mr. Thackeray said, stating that the farmers stared at an existential crisis because of this ‘wet famine.’At a time of fraught relations with ally BJP, the Sena president’s criticism of the relief package chimed in with that of the Nationalist Congress Party’s (NCP), which dismissed the assistance as “a joke.” When asked if his party would form the new government to ensure help to distressed farmers, Mr. Thackeray refrained from giving a direct answer and merely said it was “inappropriate” to speak of government formation at a time when farmers were suffering. Dig at FadnavisThe Sena chief, however, took a swipe at Mr. Fadnavis, remarking: “Despite the monsoon withdrawing, it seems to be saying mi punha yein (I shall return)… now, this has created fear among people.”Mr. Thackeray was referring to Mr. Fadnavis’s oft-repeated assertion of mi punha yein (‘I shall return’) during the Assembly election campaign that he would easily return as chief minister for a second term.Mr. Thackeray also took jibes at the Narendra Modi-led government at the Centre, saying it was New Delhi’s “duty” to help Maharashtra’s farmers in their hour of crisis. “The State has given its wholehearted blessing to the ruling party at the Centre by voting it back to power in the general election. When the Prime Minister had come to Ausa in Latur ahead of the Lok Sabha polls, I had told him the people will give you their blessings if you assure relief during drought. I now expect the Centre to extricate Maharashtra’s farmers from this crisis,” he said.The Sena chief had toured drought-hit parts of the State before a particularly acrimonious run-up to his party sealing the alliance with the BJP before the general election.Warning to banksHe exhorted crop insurance companies do away with cumbersome documentation and not create impediments while giving insurance aid to farmers. “I also urge banks to behave in a humane manner in this grave hour facing farmers,” he said, warning that Shiv Sainiks would take to task any financial institution that created obstacles in disbursing credit to farmers. “There is a need to give succour to farmers and not conduct surveys via helicopters. The farmers’ subsistence crops have been destroyed in one night at many places,” Mr. Thackeray said, remarking that the despair had reached such a point that farmers were contemplating extreme steps.Appealing to farmers not to commit suicide, the Shiv Sena chief said his party stood firmly behind them and would leave no stone unturned to provide them just assistance.last_img read more

Rookie France Ronquillo gives FEU lift in Final Four

first_imgHontiveros presses for security audit of national power grid View comments Private companies step in to help SEA Games hosting Philippine Arena Interchange inaugurated “I took my courage from the people who believe in me because as a rookie I can’t disappoint the ones who have faith in us,” said Ronquillo. “I saw how much my Ates want to go to the finals and that this isn’t the end of our season.”Sports Related Videospowered by AdSparcRead Next Cayetano: Senate, Drilon to be blamed for SEA Games mess Ronquillo came off the bench in the second set for FEU and was the architect of the Lady Tamaraws’ late 6-0 run that ultimately buried the Lady Eagles.“When I first entered I still felt nervous and I really had cold hands because last year I was just watching my Ates play and now I’m here helping them,” said Ronquillo in Filipino.FEATURED STORIESSPORTSPrivate companies step in to help SEA Games hostingSPORTSPalace wants Cayetano’s PHISGOC Foundation probed over corruption chargesSPORTSSingapore latest to raise issue on SEA Games food, logistics“I didn’t waste my time on the court and I made sure that I can help my teammates in any way possible.”Ronquillo finished with seven points in the match and was the one serving during the Lady Tamaraws’ scoring spurt in the fifth set that gave them a 13-7 lead. Panelo: Duterte ‘angry’ with SEA Games hosting hassles SEA Games hosting troubles anger Duterte Chief Justice Peralta on upcoming UAAP game: UP has no match against UST PLAY LIST 01:00Chief Justice Peralta on upcoming UAAP game: UP has no match against UST00:50Trending Articles00:50Trending Articles02:42PH underwater hockey team aims to make waves in SEA Games01:44Philippines marks anniversary of massacre with calls for justice01:19Fire erupts in Barangay Tatalon in Quezon City01:07Trump talks impeachment while meeting NCAA athletes02:49World-class track facilities installed at NCC for SEA Games02:11Trump awards medals to Jon Voight, Alison Krausscenter_img FEU Lady Tamaraws. Photo by Tristan Tamayo/INQUIRER.netMANILA, Philippines—France Ronquillo doesn’t have the same notoriety as fellow Far Eastern University rookie Lycha Ebon in the UAAP Season 81 women’s volleyball tournament but she proved she also has a bright future ahead of her.The fourth-seeded Lady Tamaraws’ season was on the line against No. 1 Ateneo but coming through in the team’s most important game this season was Ronquillo, who held her own in a five-set stunner, 10-25, 25-23, 25-22, 12-25, 15-8, over the Lady Eagles Saturday at Mall of Asia Arena.ADVERTISEMENT MOST READ DA eyes importing ‘galunggong’ anew LATEST STORIES She also notched a service ace for FEU’s 12-7 buffer.Ebon, who’s nursing a left knee injury, said she gave Ronquillo a simple pep talk before the game that their seniors would rely on them to deliver.“We talked to each other that we shouldn’t be afraid and just be brave because our Ates need us,” said Ebon in Filipino. “We need to help them and I’m super proud of Elize.”Ronquillo added that she couldn’t let her seniors down especially in a game that further extended their season.The Lady Tamaraws forced Ateneo to use its twice-to-beat advantage with the rubber match set for Wednesday.ADVERTISEMENT Don’t miss out on the latest news and information. Ethel Booba twits Mocha over 2 toilets in one cubicle at SEA Games venue Mohamed Salah carried off on a stretcher after knock to headlast_img read more