Social Threat | Who said social meant secure? » Phishing http://socialthreat.com Who said social meant secure? Sat, 18 Jun 2011 03:07:30 +0000 http://wordpress.org/?v=abc en hourly 1 More Phishing Attacks… http://socialthreat.com/2011/04/27/more-phishing-attacks/ http://socialthreat.com/2011/04/27/more-phishing-attacks/#comments Wed, 27 Apr 2011 19:57:02 +0000 Davezilla http://socialthreat.com/?p=702

There’s a great writeup on the Bobijou phishing scam over at Purple Car.

No related posts.

]]> http://socialthreat.com/2011/04/27/more-phishing-attacks/feed/ 0 Scam Spotting, No. 5: Who Always Look Into My Profile?? http://socialthreat.com/2010/03/22/scam-spotting-no-5-who-always-look-into-my-profile/ http://socialthreat.com/2010/03/22/scam-spotting-no-5-who-always-look-into-my-profile/#comments Mon, 22 Mar 2010 11:00:56 +0000 Davezilla http://socialthreat.com/?p=393

Who Always Look Into My Profile??

Facebook scam:
Who Always Look Into My Profile??
Click image for full size version

This is a poorly written version of the common, “Who is checking my profile?” scam. In fact, except for the poor English in the headline, it’s identical.

Here are the attributes to look out for:

  1. The image is set up like the “Who is checking my profile?” scam.
  2. The app name does not match the headline and multiple friends have been tagged at random.
  3. The “Try it, really works!” comment is present. Again.
  4. The album poster is not the person who owns the profile it appears on.

TIP: If you see that you’ve been tagged in a photo, before clicking, see if it’s a friend of yours. If not, do not click. Ignore. If it is a friend, click through only to see the image. If it’s not a photo of you, leave the page or report it. It’s likely this scam, or one similar.

No related posts.

]]> http://socialthreat.com/2010/03/22/scam-spotting-no-5-who-always-look-into-my-profile/feed/ 0 Twitter goes after phishing and malware http://socialthreat.com/2010/03/15/twitter-goes-after-phishing-and-malware/ http://socialthreat.com/2010/03/15/twitter-goes-after-phishing-and-malware/#comments Mon, 15 Mar 2010 12:00:09 +0000 Scott Vowels http://socialthreat.com/?p=307

Last week Twitter announced that they had installed a service that will inspect some of the URLs that are submitted through its systems.  The issue they’re trying to solve is primarily in shortened URLs which hide the destination address.  It’s been used by bad guys to hide malicious destinations.  Dave mentioned this technique a couple weeks ago and gave some great tips on how to avoid the being a victim.  Maybe the Twitter security crew was listening?

In the announcement, Twitter mentions that they’ll focus on direct messages and email notifications about direct messages.  I applaud the effort and hope it’s effective.  I wanted to point this out and give Twitter props for working on the problem.  We’ll have to see how effective it is but it’s great to see an attempt toward progress.

Hopefully we’ll see more news like this from other social media providers.

No related posts.

]]> http://socialthreat.com/2010/03/15/twitter-goes-after-phishing-and-malware/feed/ 0 Hundreds of Twitter accounts sending out spam http://socialthreat.com/2010/03/08/hundreds-of-twitter-accounts-sending-out-spam/ http://socialthreat.com/2010/03/08/hundreds-of-twitter-accounts-sending-out-spam/#comments Mon, 08 Mar 2010 14:15:55 +0000 Davezilla http://socialthreat.com/?p=273

Looks as though a third party app was hit for a phishing scam that has allowed the perps to appear to take over hundreds of Twitter accounts. According to Mashable, since all of the spammed tweets mention coming from the API, the accounts themselves are probably still OK. It’s the app they’ve allowed access to that’s been compromised.

TIP: Always think twice before giving an app access to your account. Do your friends use it? Have they had problems? When in doubt, Google the app. See if it’s legitimate before you click allow.

No related posts.

]]> http://socialthreat.com/2010/03/08/hundreds-of-twitter-accounts-sending-out-spam/feed/ 0 Hints, Hacks and Helps http://socialthreat.com/2010/02/25/hints-hacks-and-helps/ http://socialthreat.com/2010/02/25/hints-hacks-and-helps/#comments Thu, 25 Feb 2010 12:57:08 +0000 Davezilla http://socialthreat.com/?p=123

  1. You can remove passwords from edit-restricted PDFs. This article shows you how to defeat the PDF DRM.
  2. How to edit your video online for free or cheap
  3. The Automation Labs Facebook security scare. Yet another chain message tripping out folks on Facebook.
  4. How to avoid YouTube scams
  5. Spear Phishers target military

No related posts.

]]> http://socialthreat.com/2010/02/25/hints-hacks-and-helps/feed/ 0 A new phishing scam on Twitter? http://socialthreat.com/2010/02/22/a-new-phishing-scam-on-twitter/ http://socialthreat.com/2010/02/22/a-new-phishing-scam-on-twitter/#comments Mon, 22 Feb 2010 18:56:30 +0000 Davezilla http://socialthreat.com/?p=35

From Mashable today:

“A Twitter phishing attack is spreading rapidly today, attempting to obtain Twitter logins via Direct Messages. If you receive a message reading “lol, is this you”, and linking to a site called “bzpharma”, do not click the link.”

Phishing scams are on the rise and Twitter and Facebook will likely bear the brunt of them. Please, always check the links first. There are a few ways to do this:

  1. Always let your mouse hover over the link before clicking it. This way, you can see where the link is going before you click on it. If it’s a pharmaceutical site, and you’re not in the healthcare profession, it’s probably a scam.
  2. On the Firefox and Chrome browsers, you can install a handy plugin called, Bit.ly Preview. This plugin shows the full URL of shortened links on Twitter. While not all links are shortened using Bit.ly, most are, and Bit.ly is the default URL shortener of Twitter.

Have you encountered any phishing scams on Twitter or Facebook? How did you resolve them?

No related posts.

]]> http://socialthreat.com/2010/02/22/a-new-phishing-scam-on-twitter/feed/ 2