|
|
|
Twitter Spam Compromised Accounts and Websites Lead to Diet Spam |
Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Présentation : Earlier this week, a large number of Twitter accounts were compromised and used by spammers to spread miracle diet spam. The compromised accounts included public figures, as well as average users of the social networking service. Figure1_10.png Figure 1. Twitter miracle diet spam Déjà vu Diet spam is quite common and can been found on various social networking sites and Twitter is no stranger to this problem. Over the years, we ve seen many different campaigns try to capitalize on the latest miracle diet craze. In this particular case, spammers are trying to peddle garcinia cambogia extract through a page designed to look identical to the real Women s Health website. Figure2_6.png Figure 2. Fake promotional page used by spammers in this campaign Notable accounts compromised In the latest spam campaign, accounts belonging to athletes, politicians, television producers, bloggers, comedians and other public figures were compromised, which helped extend the spammers reach exponentially to hundreds of thousands of followers. Figure3_4.png Figure 3. Compromised accounts of two public figures Many of the tweets contained messages saying I couldn t believe it when I lost 6 lbs and I was skeptical, but I really lost weight followed by a URL shortened using Bitly.com. Celebrities and public figures are often sought after to help endorse products. One of the compromised accounts included Jamie Eason, known simply as the World s Fittest Model. By compromising accounts like Jamie s, spammers increase their odds of convincing someone to click on their links and perhaps even purchase the diet product. While some of these notable figures simply removed the spam tweets, others were transparent enough to admit that their accounts were compromised Well, I did lose some weight recently. No idea where that came from. Jason Kottke jkottke April 1, 2014 Thank you for tweeting about your recent weight loss strange hacker but please stop. Sorry for those tweets, I got hacked Sebastian Vollmer SebVollmer April 1, 2014 Looks like I got hacked. Sorry about that folks. I was not truly amazed by that diet link. JJ Redick JJRedick March 31, 2014 Compromised websites What makes this particular spam campaign stand out from others we ve seen in the past is that the spammers have compromised a large number of websites that are being used to redirect people to their miracle diet promotional pages. Figure4_5.png Figure 4. Compromised website running an unsupported version of Joomla The compromised websites we found are running older versions of the content management system Joomla, specifically version 1.5, which stopped receiving support from the developers back in September 2012. Figure5_2.png Figure 5. Spam link reveals vulnerable Joomla extension It would also appear that the spammers have targeted a vulnerability within the jNews Joomla extension. We have reached out to a number of the sites to inform them that they have been compromised. Connection to Pinterest spam Last week, TechCrunch published an article about spam on Pinterest. One of their co-editor s accounts was compromised and used to pin weight loss photos. Based on our research, the image descriptions and compromised sites acting as redirects are like the ones used in the Twitter campaign, so we believe that both campaigns are connected to the same spammers. Figure6_0.png Figure 6. TechCrunch co-editor s compromised Pinterest account Conclusion Diet spam is here to stay and social networks remain the perfect place for spammers to try to make money off of unsuspecting users. While it is still unclear how the spammers compromised these Twitter accounts, Symantec Security Response advises users to follow these steps to secure their accounts. For website owners, consider using the most recent version of your content management system, apply all security patches, update your extensions, and review the directory permissions on your Web servers. We are continuing to monitor this campaign and have reached out to both Twitter and Bitly to provide assistance.
Les mots clés de la revue de presse pour cet article : twitter
Les videos sur SecuObs pour les mots clés : twitter
Les éléments de la revue Twitter pour les mots clé : twitter
Les derniers articles du site "Symantec Connect Security Response Billets" :
- What you need to know about election apps and your personal data
- Microsoft Patch Tuesday April 2016
- New Adobe Flash Player exploit used by Magnitude and Nuclear exploit kits
- Latest Intelligence for March 2016
- New Flash zero-day exploited by attackers in the wild
- Samsam may signal a new trend of targeted ransomware
- Four tax scams to watch out for this tax season
- Most prevalent Android ransomware in the West arrives in Japan
- Taiwan targeted with new cyberespionage back door Trojan
- Seven Iranians charged in relation to cyberattacks against US
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.190.17.190 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.190.17.190 to any 80"
- Nous contacter par mail
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
