Latest Facebook Clickjacking Attack

This report describes a Facebook clickjacking ("likejacking") campaign that embedded a malicious iframe (http://girlkilledherself.leadhoster.com/suicide38/iframe.php) into a Facebook page and used CAPTCHA-like button prompts to trick users into liking and posting the page. Victims were redirected to advertising and scam sites; the attack leveraged social engineering for propagation and did not deliver malware, though it caused widespread unintended shares/likes.