New spam tactic: Spam profiles on social networks
Monday, June 29, 2009
Spammers have been creating profiles on social networking sites to attract unsuspecting users through spam friend requests and messages, according to Google researcher Jason Morrison, writing on the Google webmaster blog.
Some fake profiles include popular pharmaceuticals as the profile name, but savvier spammers have begun to use real names and realistic data to fly under the radar and populate the network with bad links.
"To make sure their newly-minted gibberish profile shows up in searches they will also generate links on hacked sites, comment spam and yes, other spam profiles," Morrison said on the blog. "This results in a lot of bad content on your domain, unwanted incoming links from spam sites and annoyed users."
Morrison warned that spammers can exploit bulletin boards and content management systems such as vBulletin, phpBB, Moodle and Joomla that generate member pages for every user that creates an account.
Webmasters can cut down on spammers exploiting their websites through anti-spam features such as CAPTCHAs and user reporting of suspect profiles.
Facebook, under attack from spammers using hijacked accounts, filed a lawsuit in February against notorious "spam king" Sanford Wallace, claiming they violated CAN-SPAM and won a restraining order in March banning them from the site.

Related News:
Spam mail finding success among the young, obese - 1.8.2010 A study recently published in the Southern Medical Journal indicates that overweight and young people were much more likely than others to open spam mail touting weight loss products, with almost one in five overweight college students studied reporting that they actually purchased the products offered.
Spyware researcher says Google should drop partnership with shady advertising partner - 1.7.2010 Harvard Business School professor Ben Edelman has published a report which, he says, details a commercial relationship between search giant Google and a pay-per-click advertising firm called InfoSpace. According to Edelman, InfoSpace uses conversion-inflation traffic - posting ads for websites in ad space on those same websites - from the WhenU spyware program to boost its profit margins.
Controversy flares over ReCaptcha's effectiveness - 12.22.2009 Security researcher BitLand has said in a report that the ReCaptcha technology used by Google to secure itself against logins by bots is flawed, but Google says that it is BitLand's analysis that is defective.
Facebook sues to stop spam - 12.16.2009 Three men are being sued by social networking site Facebook, which alleges that they used phishing to gain access to the user accounts of others and used the hijacked accounts to send spam messages, according to CNET security correspondent Elinor Mills.
Chinese authorities clamping down on website registrations - 12.15.2009 The Chinese government has announced that it will begin requiring business licenses and extensive paperwork in order to register a .cn web domain name.
|