Every day, new Facebook spam is born. Hardly Facebook can detect and kill them immediately unless a large number of users report the Link. In its lifetime, Out of 100 users who come across it, only 20 people will ignore it. The rest of the 80 people will unknowingly click through it and fuel the ClickJacking Attack.
Read: What is ClickJacking Attack
It is essential that everyone know about clickjacking attack.
But sometimes, even after knowing, we accidentally click on SPAM links loaded with JavaScript, Flash, and other embedded codes meant for a clickjacking attack.
This leads to SPAM posts on your Facebook timeline and sometimes on your friend’s timeline and the groups you are a member of.
To prevent such embarrassment, “NoScript” comes to the rescue.
The Firefox/Chrome Extension “NoScript” protects users by selectively blocking all the Scripts in a Webpage that might not be Safe.
It allows Scripts (JavaScript, Java, Flash, and other plugins) to be executed only by trusted web sites of your choice.
Besides, you are free to allow scripts to run selectively on the websites you trust.
Install: NoScript Chrome
Along with click-jacking attacks, NoScript also protects you from XSS attacks.
XSS (Cross-Site Scripting) vulnerabilities are usually programming errors made by web developers, which allows an attacker to inject his own malicious code from a specific site into a different website.
XSS vulnerabilities can be used, for instance, steal your authentication credentials and impersonate you on the victim site. But with “NoScript” installed on your web browser, you need not worry about XSS attacks.
You might also like Sidejacking – Hacking USER Accounts on LAN & WiFi!
Let us see some of the latest clickjacking attacks (Facebook spam)
1. Get FREE $200 Amazon Gift Card!
Another Amazon Gift card scam is luring people across Facebook, and No, it doesn’t use any clickjacking attack. Instead, it just tricks users into sharing the scam with their friends all by themselves.
I just came across this Facebook post titled “Get a FREE $200 Amazon Gift Card.” At first, I thought it was genuine since the user had actually shared it by himself and not how normally scams are spread on Facebook (via unknown apps). This got my attention, and I immediately checked the link.
So here is the smart landing page of this Scam. It appears that it is offering a free gift card if you “Share” their page and comment “Thanks” before getting your gift card. If you share it, it posts to your Facebook stream, and other people see it and automatically trust you and click on share as well.
You see how these Scammers are encouraging you to re-share the link and add a Thanksgiving comment before it will allow you to access the allegedly free Amazon gift card.
Once you complete the required steps, you will be taken to another webpage, wherein you will be asked to complete surveys or offers that are affiliated with scammers, who in turn earn cash for every survey or offer you complete. There is no gift card.
The Amazon gift card scam is very similar to other Facebook scams. First, they require people to like or share the message on Facebook in an attempt to spread the scam.
Second, they direct people to complete a fraudulent survey, which extracts personal information such as email addresses, telephone numbers, dates of birth, and credit card numbers.
Lastly, these scams never end with a free gift card or anything that was promised before.
2. Free Amazon gift card codes—scam!
So here I come across another smart scam called “Free Amazon Gift Card Codes” spreading through social networks, specifically WhatsApp.
So this scam website (Free Amazon Gift Card Codes) is promising users a free gift card worth $50 for simply sharing their link with friends. Yeah, that’s like distributing free money to people in order to get free money. It sounds absolutely stupid.
According to this fake Amazon Gift Card website, you would get $50 worth of gift cards when you got people to click on your referral link. You need to earn at least 25 “clicks” in order to request your free gift card. That sounds very professional.
Did you already indulge yourself in this Scam? well, you need not worry about it since this scam is harmless and won’t put you in any danger except that you stand stupid in front of your friends. The reason behind this scam is unknown, but we believe it was mainly done for domain publicity and to gain authority.
If you happen to come across such posts in your Facebook feed, please do not click on it and make sure you report it to Facebook. When clicked, it will take you to an external page that disguises as a YouTube video player.
Related posts:
- How to hack Facebook account password
- FB ID Hacking Software
- How to find out who created a fake Facebook account
- How to track location of Facebook user
- Fake Facebook profile how to trace
- Getting IP Address from Facebook Messenger App
- How to bypass Facebook password
