Social Threat | Who said social meant secure? » clickjacking

Scam Spotting, No. 6: FarmVille Cash

Davezilla — Tue, 23 Mar 2010 11:00:44 +0000

Farmville Cash scam

Facebook scam: FarmVille Cash
Click image for full size version

With over 88 million monthly users, it was inevitable that FarmVille would become a target for scams. Indeed, Social Threat’s Scott Vowels predicted this last week in a comment. The FamVille Cash scam is similar to the other album clickjacking scams we’ve been highlighting lately.
Here’s the attribute to watch out for:

Uses the correct FarmVille logo for cash, but remember, FarmVille’s currencies are not called “FarmVille Cash,” they’re called “Farm Cash” and “Farm Coins.” You can see how easily people are being fooled by that.
“I’ve sent you a 900 farmville cash using farmville cash! Accept this gift and send one back!” Notice the poor grammar, the improper capitalization and the call to action which, if clicked, will install the scam application on your profile.
Friends are randomly tagged, as is the case in most of these scams, and the app is posted seemingly by itself.
Album poster is different than the photo poster, and the name seems to be three different ethnic groups in one.

Additionally, we have two more screenshots for you. This first one shows that this app’s page has a number of anomalies itself.

Click image for full size version

No logo
1,454 people gave this app a 1-star rating.
108,000+ users, but only 2 friends
Category is “All” instead of “Games.”
No recent posts

And finally, look at the reviews themselves. People who were scammed are speaking out against this app.

TIP: Just because you play a large, safe game like FarmVille, doesn’t mean that you’re safe from scams. By simply looking at the game page before adding it, you would easily see that this page is fishy. Over 100,000 people have fallen prey to this scam. Don’t be one of them. If FarmVille logos appear in your photo albums, delete them.

No related posts.

Scam Spotting, No. 4: Fantasy Art

Davezilla — Sun, 21 Mar 2010 21:22:46 +0000

“Several”

Scam Spotting, No. 4: Fantasy Art
Click image for full size version

This is a very unusual version of the Facebook album scams hitting this week. While it has a lot of the standard characteristics of the others, it doesn’t pretend to be an app; it’s just a nice piece of artwork. It is also lacking the “Try it, really works!” comment.

Here are the three characteristics to watch out for:

Fantasy artwork that has little or nothing to do with the member’s interests.
Multiple friends will be tagged in the photo. We’ve noticed that the Fantasy Art scam tags twice the number of friends as the other scams.
Album name is “several” and the “posted by” name will not be the owner of the Facebook profile.

TIP: If you see that you’ve been tagged in a photo, before clicking, see if it’s a friend of yours. If not, do not click. Ignore. If it is a friend, click through only to see the image. If it’s not a photo of you, leave the page or report it. It’s likely this scam, or one similar.

No related posts.

Scam Spotting No. 3: Beware of Tagged Facebook Gifts

Davezilla — Thu, 18 Mar 2010 11:00:19 +0000

Life Gets Better…One Good Thought At A Time

Facebook scam: Life Gets Better…One Good Thought At A Time
Click image for full-size version

This screenshot was sent in by Stacy V., who spotted it on her friend’s Facebook account. She thought it was a little odd, checked with me and confirmed minutes later that it was definitely fraudulent.

At first this appears to be a legitimate gift from a friend except:

Gifts do not appear in photo albums; only on walls or within the app itself.
The app URL is suspect (length).
GIfts are not generally tagged. You would generally receive a notice that you have received a gift via the Notifications listing.

This scam looks like it does the same thing as “Who is looking at my profile?” that we profiled the other day. Unfortunately the screenshot she supplied me does not show the first comment (the others so far have the exact same first comment). I will update you as soon as I find that out.

TIP: If you see that you’ve been tagged in a photo, before clicking, see if it’s a friend of yours. If not, do not click. Ignore. If it is a friend, click through only to see the image. If it’s not a photo of you, leave the page or report it. It’s likely this scam, or one similar.

No related posts.

Scam Spotting, No. 2: The Sims? Not likely!

Davezilla — Wed, 17 Mar 2010 15:46:23 +0000

The Sims 5626

March 23 Update: Another variant of the Sims scam is appearing. The numbers will change from person to person, (i.e., Sims 9242, Sims 3876) but the app name is now appearing as “game-simulation” as in http://apps.facebook.com/game-simulation/ and oddly, the non-working link of http://apps.facebook.com//. This is likely a bad cut and paste.

Facebook scam: The Sims 5626
Click image for full size version

The Sims scam has made the rounds lately on Facebook. It works exactly like the “Who is checking my profile?” scam I wrote about yesterday. An album appears on the member’s Photos tab with numerous screenshots of the Sims, as if they were screens taken from the game. This is common on Facebook. A number of the Zynga games, including Farmville and Fishville have album creation capabilities.

Notice the anomalies however, that distinguish it from being an actual Sims game on Facebook.

The title is always,”Let’s enjoy this game and be one of us.” The broken English should be a giveaway. EA Games would never allow that.
The “girls fighting in underwear” screenshot is common. There are four screens that I have come across in this scam, but this one is the most prevalent.
Sims 5626. In other words, not The Sims. Author is “Joe Caba”, not EA Games. Joe Caba, by the way, is not a member of Facebook. I checked.
Lastly, the ever present, “Try it, really works!!” comment rears its ugly head once again.

TIP: Always check first, if it was a friend who tagged you in a photo before adding any applications. Never assume because a screenshot of a game was used, that the app is from the actual game. It only takes 30 seconds to Google “The Sims” and find out that the Sims is made by EA, not Joe Caba.

No related posts.

Scam Spotting: No. 1: Who is checking my profile

Davezilla — Tue, 16 Mar 2010 19:37:18 +0000

Who is checking my profile?

Facebook Scam: Who is checking my profile?
Click image for full size version

The first scam in this series is the “Who is checking my profile?” scam. It looks innocent enough. A graphic made up of friends’ avatars and below it, their names tagged.

Clicking to add the app yourself will screw you beyond belief. It will, like any Facebook app, ask for permission to have access your data, but rather than safely use the data for normal usage like, “Hey it’s your birthday,” it proceeds to steal your personal info. Identity theft via social media. This is especially dangerous if you are using Facebook credits for games (like Farmville) as your bank or credit card info is now in the hands of the scammers.

Notice in the enlarged image the first comment: “Try it, really works!” This comment is consistent within this scam. The comment is then followed by a link to an app that seems like gibberish. A legitimate app would have a URL that mentions the app’s name.

TIP: If you see that you’ve been tagged in a photo, before clicking, see if it’s a friend of yours. If not, do not click. Ignore. If it is a friend, click through only to see the image. If it’s not a photo of you, leave the page or report it. It’s likely this scam, or one similar.

No related posts.