logo

Facebook Spam: Zscaler Tool for "LikeJacking" Protection

ID: ce2f13d0-a41e-5d9a-9aff-e75e9acc570b

STIX ID: report--ce2f13d0-a41e-5d9a-9aff-e75e9acc570b

Feed Name: Zscaler Security Research Blog

Date Published: 2025-10-10

Date Updated: 2026-05-01

...
...

This post describes the Likejacking clickjacking technique that hides Facebook widgets and presents the Zscaler Likejacking Prevention browser extension (Firefox, Chrome, Safari) as a defense. The extension detects and flags pages with hidden Facebook widgets (red/green UI indicator), can expose hidden widgets, requires explicit user confirmation for widget actions, supports domain allowlisting and reporting, and is intended to protect users on third-party sites rather than altering Facebook itself.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.