Facebook clickjacking: Dirty Italian schoolteacher undresses

Filed Under: Clickjacking, Facebook, Social networks, SophosLabs, Spam

Italian users could be at risk of being clickjacked on Facebook, as a new attack is seen spreading between users.

SophosLabs has been seeing some detections of Mal/FBJack-A from Italian users, as they attempt to watch a video of a stripping Italian schoolteacher.

Video tease

The webpage presents itself as though it is about to play a video. It's title reads:

Professoressa SP0RCACCIONA si SP0GLIA nei banchi scuola per scommessa , VIDEO DA NON PERDERE

If you don't speak Italian, here is a rough translation 'in inglese':

Dirty teacher undresses between the school desks. Video not to be missed.

Searching on Google I was able to find over 3000 apparent links to the attack page, indicating that the scam is widespread on Facebook at the moment.

Google results

Here is what an infected Facebook user's page would look like, with mention of the clickjacking page in their "Likes" section:

Image of an infection on an affected user's Facebook page

Facebook users not using Sophos Anti-Virus can protect themselves from clickjacking threats like this by using browser plugins such as NoScript.

NoScript blocking the clickjacking attack

Facebook users can learn how to protect themselves by reading Sophos's recommendations for Facebook security. Interestingly, our advice looks much sexier in Italian: Consigli di Sophos per le impostazioni di Facebook.

To keep informed about the latest Facebook security threats, please join the Sophos page on Facebook where we regularly highlight new attacks.

, , ,

You might like

One Response to Facebook clickjacking: Dirty Italian schoolteacher undresses

  1. PhilCat · 1336 days ago

    Now lets see the actual process of how lax FaceBook reviews scam ad's placed on their servers.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Paul O Baccas (aka pob) joined Sophos in 1997 after studying Engineering Science at Oxford University. After nearly 16 years, he has left Sophos to pastures new and will be writing as an independent malware researcher. Paul has: published several papers, presented at several Virus Bulletins and was a technical editor for "AVIEN Malware Defense Guide". He has contributed to Virus Bulletin and is a frequent contributor to the NakedSecurity blog.