Jan 3, 2012

HEY!! LET ALL OF US TRY AND WIN THESE 4 FREE SOUTHWEST AIRLINE TICKETS AND GO SOMEWHERE WARM.WE ALL MIGHT WIN AND WE CAN VACATION TOGETHER.



Above seen is a recent Facebook scam. Clicking on the scam link will take you to a phony marketing survey and also installs an Adware program.  Below seen is the spam posted in one of the infected user’s wall.


The link in the spam will lead you to the site www.airlinesticketssr.blogspot.com. The blogspot domain is specially designed to host the scam content. Where ever you click on the below page it will redirect you to http://trax77.com this in turn identifies your location.


Only people from certain country example like US  will be shown with below site ‘try.bestairlinetickets.co’. It asks you to enter your email address and click on the continue button.




Next it will open up the fake registration page and asks ou to enter your personal information to claim your 2 free Southwest Airines Tickests.


Then it asks you to complete the 5 minutes survey which consists of 13 personal questions.


Once survey is completed it will ask you to follow 3 step processes which includes sharing the message in Facebook and installing an application called ShopAtHome browser plugin which some AV vendors detect as adware and some say it as trackware and potentially unwanted application since they are capable of monitoring browser activity and displaying results based on your search queries. Some say it redirects visits to merchant sites in order to take the affiliate fees from them automatically. Whatever may be there is nothing related to free air tickets for you.


If you’re chrome user you will be prompted with below window.  Note the list of things it can do once installed so be aware of any browser plug-in you install.


To remove the plugin. If you’re Chrome user go to Tools->Extensions->Remove


Similar variant '2 FREE Southwest Airline Tickets! (limited time only)' - Southwest Airline is currently giving away 2 FREE Tickets to all facebook users!



Domain currently active are rewards02.s3-website-us-west-1.amazonaws.com, flyfreetoday.s3-website-eu-west-1.amazonaws.com,  flyingplane.s3-website-eu-west-1.amazonaws.com, plane4.s3-website-us-east-1.amazonaws.com, flyingplane2.s3-website-eu-west-1.amazonaws.com, flyfreer.s3-website-eu-west-1.amazonaws.com.

No comments:

Post a Comment