Giveaway of the Day Forums

1. 

   Anonymous
   Unregistered

   http://www.sophos.com/blogs/gc/g/2010/05/31/viral-clickjacking-like-worm-hits-facebook-users/

   Sophos detects the offending webpages as being infected by Troj/Iframe-ET.

   http://www.eweek.com/c/a/Security/Facebook-Users-Hit-With-Clickjacking-Worm-813961/

   Facebook Users Hit with Clickjacking Worm

   "LOL This girl gets OWNED after a POLICE OFFICER reads her STATUS MESSAGE," "This man takes a picture of himself EVERYDAY for 8 YEARS!!" and "The Prom Dress That Got This Girl Suspended From School."
   "Some of the Web pages had over 300,000 people 'liking' them," Graham Cluley, senior technology consultant at Sophos, told eWEEK.
   Essentially, the clickjacking attack tricks users into marking a page "like" without realizing it and then recommending the page to their Facebook friends

   Posted 14 years ago #
2. 

   Robert
   StrayCat

   Thanks hotdoge for providing these very interesting links... as usual.

   NoScript version 1.9.9.81 claims to protects against clickjagging and tabjacking/tabnabbing
   (protection enabled by default)

   Posted 14 years ago #
3. 

   copmom
   Member

   Now I see what Robert meant by 'clickjacked'! Oh, I installed NoScript, and I think it's a pain in the rear.. keeps giving me pop up message boxes, maybe I need to 'train' it or something? At the moment I've temporarily disabled it.

   Posted 14 years ago #
4. 

   Robert
   StrayCat

   Copmom,
   Right click on the NoScript S button , just above the notification area (system tray.LOL),select Options-notifications and disable "show message ..."
   That should take care of it,unless I'm mistaken...
   :)

   Posted 14 years ago #
5. 

   Inas
   Member

   Yes, I've installed "NoScript," and it's doing a beautiful job of blocking the GOTD "stickr" and "share-message bar" from showing up, in addition to other pop-ups. Copmom, it does take a little getting used to in terms of "training" NoScript to know which sites to block or not block, which is something you can designate by "right-clicking" the "options" NoScript menu (at bottom of page), as Robert rightly mentions.

   Posted 14 years ago #
6. 

   Tailteann
   Member

   NoScript is a beautiful thing and worth the tiny bit of time needed to manage it as you navigate pages that are new to it.

   Posted 14 years ago #
7. 

   goodgotd
   Member

   Well worth the time killing the NoScript homepage each time it or FlashGot get updated, too.

   When I install Firefox, NoScript, FlashGot and Free Download Manager go in with it. Ok, if it's just to play online gaming sites like Pogo I skip the last 2.

   WOT, GoogleSharing and PDF Download are the next level.

   The first and last are optional if the browser is going *only* to Pogo, but GoogleSharing makes me feel all warm and fuzzy knowing I'm confusing the Chocolate Factory at least a little. automagically.

   NoSquint if the monitor is small- 15" or smaller it's must-have though it's right handy even on bigger if your eyes are bad.

   FoxLingo if it's going to go to overseas sites, and personally I like Hostname in Titlebar.

   On the other hand, isn't it a deep irony that GAOTD just went on Facebook?

   Posted 14 years ago #
8. 

   Anonymous
   Unregistered

   NoScript not hard to fix if you know how you can Pick Temporarly allow = Temp or Allow or add in the white list it the same as Allow is all time do this now only new one will ask you, I allso add in the whitelist bebo facebook clipmarks mywot.net mywot.com siteadvisor.com virustotal.com recaptcha.net
   and check to see if some get in you don't need.

   Posted 14 years ago #

RSS feed for this topic

Reply

You must log in to post.