Facebook Scams Involves Likejacking

This report documents a widespread Facebook spam/scam campaign that uses social-engineering and web-based attack techniques—likejacking, comment-jacking, and script injections—to trick users into liking or sharing malicious pages, pasting and executing JavaScript that steals session cookies, or completing paid surveys/installing software. The author lists multiple malicious domains and Facebook app/page links, shows examples of the attack pages, and warns that these tactics lead to account compromise and monetization for the scam operators.