Endpoint Protection

 View Only

The Phishing of Applications on Social Networking Websites 

Dec 11, 2009 03:43 PM

The popularity of applications on social networking websites has increased a great deal this year. This has led to a new wave of phishing attacks targeting the users of these applications. Symantec has examined phishing websites exploiting three major social networking brands. The fake websites display attractive offers on the social networking applications to lure end users. Some of the applications that the phishing sites were based on are:

1.    Social networking on mobile – Due to the rise in the number of users accessing the Internet through smart phones, social networking websites have expanded their services on smart phones, including messaging, chatting, photo viewing, etc. This increase in users has opened more doors to attackers because there are now more potential victims. Hence, attackers have created phishing websites on social networking brands claiming to provide these services on smart phones.
2.    Live chat – In November, Symantec observed that five percent of the targeted applications were on live chat, and among them adult sex chat was the most common target. The phishing attacks show fake offers of free sex chat to lure end users into entering their login credentials.
3.    Blogging – Phishing websites that attacked blogging in social networking comprised 23 percent of all targeted applications. Various attractive blog topics are used in the login pages of the phishing site as a means to con end users. Pornographic material is one of the most common topics observed in these phishing attempts.
4.    Gaming – In 2009, gaming has become an increasingly popular aspect of social networking. Symantec evaluated gaming and found that it comprised 13 percent of the targeted applications. Gaming applications in social networking generally require various kinds of credit points to progress to higher levels of the game. Some of these credit points typically require online payment. The phishing websites trick users by providing fake offers of free credit points on these gaming applications.

Internet users are advised to follow best practices to avoid phishing attacks. Here are some basic tips on avoiding online scams:

•    Do not click on suspicious links from emails.
•    Check the URL of the website and make sure that it belongs to the brand.
•    Type the domain name of your brand directly in your browser rather than following any link.
•    Frequently update your security software, such as Norton Internet Security 2009, which protects you from online phishing.

-------------------------

Note: My thanks to this blog's co-author, Anand Muralidharan.

Statistics
0 Favorited
0 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Related Entries and Links

No Related Resource entered.