Sunday, April 17, 2011

(your friend) has answered a question about you!

If you see the message "[insert friend's name here] has answered a question about you!"
Be very wary of this wall post. It's not a real app, it's actually a clever hackers browser exploit. What happens after you click the link is your web browser is hacked,

I used my fake account to check out this scam and after clicking the link which causes the exploit, it takes you to the installation/permission page for the app Friend Expose, which is an app that seems to be spreading around rapidly. This app however appears to actually be a fraud in itself. It's only pretending to be a question app.

How do I know this?

I literally JUST made my fake Facebook account It has only one friend added, that friend is my real Facebook account. but this is what  I see in the app:


The app tells me people answered 62 different questions about me and that I can "unlock" who said what.

Seeing as I'm my only friend on this account, and on my real account I don't even have friend expose. This isn't even possible.

Friend Expose gives you credits  for "answering questions about friends".

The app mimics question apps because it makes it even more stealthy, stealthy enough to not get caught by Facebook. I answered the question with "yes" just for shits n giggles.
Yea I do have a nice ass! lol
Immediately it shot my real account a message. Web Of Trust immediately shows Red meaning other users have rated as unsafe. I have the web address highlighted with my mouse(shown at bottom of screenshot) This link leads to a site off of Facebook, what happens there is the browser exploit is installed into your browser without you ever seeing anything, it quickly redirects you to install friend expose if you're the user without it.

This app is in essence a very very very well made scam, it cleverly disguises itself as a friendly question app when in reality it's really infecting all of your friends. The app also allows you to do surveys or use paypal to buy more credits to unlock the answers to your questions. I kept asking questions until I had 50 credits. Unlocked a question and it told me that my real account answered the question.

Reality is, it just picked a random person from my fake accounts friends list, and since I'm the only friend on it, it picked me. My real account doesn't have the app and therefore CAN'T answer the questions on the app.

Thus a fraud to steal money exploit web browsers and spam the crap out of everyones Facebook walls.

What to do if you fell for this scam?
Remove Friend Expose from your Facebook account.
The Browser Exploit will still be there, but your account won't have the app anymore. Next you must  reinstall your browser or switch web browsers. I recommended using Google Chrome or Mozilla Firefox. I highly suggest against Internet Explorer.

Let your friends know, link this article to your friends that appear to have been affected by this malicious app.

Tuesday, April 5, 2011

Web Of Trust - 1 easy way to protect yourself against scams and bad sites on the web.

There's a great tool out there that you may have heard of, it's called Web Of Trust. Web of Trust is a free browser add-on that shows an indicator on the reputation of a website, if the reputation for a site is poor the indicator will show red as well as pop up a message as soon as you pull up the site, letting you know, it's not a safe site and asking you if you would like to stay on the site.

Even for advanced computer users who can spot scams almost immediately, Web Of Trust is still useful.
Users can report sites that they believe to be suspicious, as well as give the site ratings.

Web of Trust also has begun protecting you on places like Facebook and Twitter. Whenever you see a link that leads off of Facebook you will see an indicator icon near the link to tell you the ratings on the site.

I highly reccomend this addon to everyone.

Click here for an example of the detailed ratings on a site you get from Web Of Trust(WOT for short)

Click here to go to the Web Of Trust Website

I cant believe that you can see who is viewing your profile! - OpenMouthed

You may start seeing a scam referred to as OpenMouthed spreading virally throughout your friends.

If your friends fall for the scam their Facebook account will begin to post news feed messages
With one of these two messages:
LOL !! Me cant believe that you can see who is viewing your profile! I can see the TOP 10 people and I am really OPENMOUTHED that my EX is still checking me every hour. You can also see WH0 CHECKS YOUR PR0FILE here-> [LINK]
or
I cant believe that you can see who is viewing your profile! I can see the TOP 10 people and I am really OPENMOUTHED that my EX is still checking me every hour.You can also see WH0 CHECKS YOUR PR0FILE here @ [LINK] 
Screenshot courtesy of Sophos

Since this is a viral APP it could potentially start posting different messages when the hacker/developer updates it. 

Note: another way to tell if a message is from this app is by the name. What I mean is under the post it will say "8 minutes ago via Profile Scannerz" in grey below the message.

The app name can change however so if you see the above message or similar, it's probably not safe.

Also no app can check who looks at your profile, it's not possible, that app would have to have planted code on your facebook profile outside of an apps wall. No app has the ability to do that, only Facebook can do that.

Whatever you do do not click the link in the message when you see it posted, likely the link will be a shortened URL from bit.ly, This link will try to give the app permission to post to your wall, and view some of your information. 
Screenshot courtesy of Sophos

If by chance you've clicked the link, gave the app permissions(probably thinking that it will give you the ability to see who looks at your profile). The app will take you to a group of surveys, but it doesn't outright say they're surveys, they say they're tests to make sure you are who you say you are. Surveys are how the hacker/dev makes money off of this scam. 


If you fell for the scam you can stop the app from posting on your behalf and erase messages it posted. 
Here's how:

Video Courtesy of Sophos


Saturday, April 2, 2011

Who blocked you from his friend list?


I appologize for this screenshot being so messed up, I was using the snipping tool for it to hide the names of infected people and it got really buggy.



If you get an invite to this "event" don't even bother opening it, it's a scam. Just like the "Nastiest Girl" scam it it redirects your browser a few times takes you to install a malicious app.
This app grabs your profile info and asks for the permission to create events on your behalf.
one of the malicious apps that this event links to, look at the permissions it asks for.
What this app then does is spam your friends with these fake events until all of your friends finally fall for the scam and this app spreads virally filling everyones event inbox's with complete junk. It is unknown what the app does with your personal information, it may store it somewhere, sell it, or be used for other scams.

OMG Watch the Nastiest Girl Fight Video Ever

A Scam has popped up now taking advantage of people who don't realize the difference between apps and Events on Facebook. This scam spreads by people "attending" and inviting others to attend the event. This event spreads virally just like all of the other scams I've reviewed.

The Event page looks like this:
As pictured the profile picture for this event displays a picture of a girl with a play button over her. This is not a real video, it is simply just a picture on the event page. Users fall prey to the scam by clicking the link posted in the description of the event. Installing and giving a malicious app permissions over their account.

Some users, not all, claim that they do see a video after clicking the link. These people may be trolls, they also may be fake accounts created by the scammer to try to convince people to click the link.

If someone were really trying to show you some nasty video, they would show it to you on youtube or another popular online video service. Don't fall for these scams.