Threat Intelligence Blog

Posted March 19, 2014

ev
Facebook page with fake video

Cyber criminals continuously take advantage of current events in order to trick people into clicking malicious links or sharing personal information. For example, last month we wrote about how mobile malware was being spread through Valentine’s Day apps.

Now, multiple stories are surfacing of Facebook pages and Twitter posts claiming to have a video (which is fake) of the lost Malaysian Airlines flight. Malware intelligence analyst Chris Boyd at Malwarebytes reports that the links being spread through Twitter originally appeared on Facebook.

Some of the fake video titles include headlines like “Shocking Video: Malaysian Airlines missing flight MH370 found at sea”, “Malaysian Airplane MH370 Already Found. Shocking Video Release Today by CNN”, and “Plane has been spotted somewhere near Bermuda triangle. Shocking videos released today on CNN news.”

When unsuspecting visitors go to watch the video, they’re prompted to complete a survey. The survey may look genuine, but it’s designed to access Facebook profile data. This gives criminals access to personal details in profiles, giving them the information needed to conduct further scams or sell personal information to data brokers. Some of the fake news stories and videos redirect visitors to websites that download malware or prompt visitors to share the malicious link in order to watch the video, spreading the false stories even faster.

As is usually the case in events like this, scams and fake stories will continue to spread and proliferate, particularly fundraising scams, articles purporting to have news or videos from the victims. When in doubt, check reputable websites and news sources first, and encourage friends and family who aren’t as security-savvy to do the same.

Additional Posts

Using Contract Provisions to Mitigate Potential Damage from Cyber Attacks

By Camille Stewart Law Seminars International hosted a thought-provoking teleconference event last ...

Using Network and Threat Data Chaining to Discover Malicious Infrastructure and Deliver Context

Recently on his blog, computer-forensics researcher and Malcovery Security co-founder Gary Warner ...