Debunking email hoaxes and exposing Internet scams since 2003!


Hoax-Slayer Logo Hoax-Slayer Logo

DividerDivider
Home    About    New Articles    RSS Feed    Subscriptions    Contact
DividerDivider
Bookmark and Share









Miley Cyrus Facebook Scam

Outline
"Breaking News" message being pushed out across Facebook claims that a salicious video of Miley Cyrus has been leaked on the Internet and invites users to click a link to view the footage.



Brief Analysis
The message is a scam designed to trick users into handing access to their Facebook accounts to cybercrooks and participating in bogus online surveys. Regardless of how many surveys they fill out, victims will never see the supposed video. And, the compromised Facebook accounts will be used to flood Facebook with even more scam messages.

Bookmark and Share
Detailed analysis and references below example.





Last updated: October 2, 2012
First published: October 2, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer


Example
Miley Cirus Video Scam

omg! haha miley got busted and her xxx tape got leaked on fb! watch it here: [Link removed]




Detailed Analysis
A message purporting to be "Breaking news" about actress and singer Miley Cyrus is currently being spammed out across Facebook. The messages claim that a compromisiing Miley Cyrus video has been leaked on the Internet and that millions of men have called in sick after viewing it. A link included in the message invites viewers to watch the supposed tape.

However, the message is a criminal ruse that attempts to trick users into providing scammers with access to their Facebook accounts before enticing them into participating in bogus online surveys. Those who fall for the ruse and click the link in the hope of seeing the tape will be taken to a page that displays what appears to be a typical video player:

Bogus Miley Cyrus Video

Those who proceed to click the "Play" button will next be taken to a page that claims they must verify their age before proceeding. The page instructs users to copy a "verification" code from the Facebook account address bar and then paste it into the field provided on the fake page:

Fake Age Verifcation Page

But, by pasting in the "verification" code, the hapless user is in fact giving the scammers access to his or her Facebook account. BidDefender's HotforSecurity blog explains that
the "verification code" is in fact the victim's Facebook authentication token, which can then be used by the criminals to temporarily hijack the Facebook account. The hijacked accounts will then be used to automatically blast out more scam messages just like the one shown above.

Meanwhile, after engaging in the - utterly bogus - age verification process - the victim will be moved forward into a typical survey scam. They will be told they must complete a survey or offer before finally seeing the video. Some of the "survey" pages ask users to provide personal information including name, address and contact details, ostensibly to allow them to go in the draw for a prize. Others invite them to download dubious toolbars, games or software. Still others will claim that users must provide their mobile phone number - thereby subscribing to absurdly expensive text messaging services - in order to get the results of a survey or go in the running for a prize. Alas, no matter how many surveys they complete, they will never get to see the promised Miley Cyrus video they have been so anticipating. And, embarrassingly for the victims, all of their Facebook friends will be tagged in the scam messages blasted out by their accounts and know exactly what they were clicking on.

Miley and other celebrities have been used as bait in many similar spam attacks in the past. Be wary of any message that claims that you can read breaking news or see salacious video footage of a celebrity by clicking a link in an email or social media post. This is a common scammer ruse.

Bookmark and Share



References

Miley Cyrus Tagjacking
Miley Cyrus Tape Scam Designed to Swipe Facebook Authentication Tokens


Last updated: October 2, 2012
First published: October 2, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer