Jan 13, 2012

OMG! hahaha i know who visited my profile! Those tagged have visited my profile the last week!

Hai All! Here is a new variant of old survey scam going around in Facebook. This time it makes you click on the malicious link saying I know my profile visitors. To know how click on the link http://tinyurl.com/profilevieweroFORn. It also has one more link to a Fake photo with malicious link posted in the flickr webpage. So which ever link you click on you will be redirected to a page which host malicious link.



When you click on the above seen tiny url you will be redirected to a blogspot page 'profile-ghost-viewer20.blogspot.com' which runs a JavaScript easy-tricks.info/profileviewer/include.js to display the below content.

  
Like any other Facebook scam it asks you to follow few steps. This is because till now you're not affected by this scam. It requires your action to spread as well as infect your system. Once you click on the install button like said in the first step it will install an browser plugin like seen below.


The second step is a big trap. To make sure you have signed into Facebook. Because it can spread only if you have logged into Facebook account. The third step will initiate the plugin and spread the spam through your wall. The spam message need not be same it can be old or new one whatever like designed by the spammer. 

Did u notice "Like our page" in step 1, lets check that page. Looks it is promoting some videos and it already has 11,110 likes.


Now, lets see the link to the flickr photo displayed in the post. It asks you to click on malicious link to know more.  


The link easy-tricks.info/profileviewer/ will take you to easy-tricks.info/profileviewer/widget.php which will pop-up a window listing surveys to complete before you view the profile visitors.


You will only end up filling survey scams for the spammer to earn money. There is nothing legitimate here. If you have followed these steps then you're victim of this scam. I request you to uninstall the plugin immediately by going to browser options.

No comments:

Post a Comment