Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


563 posts

Ultimate Geek
+1 received by user: 89


Topic # 160048 21-Dec-2014 22:15
Send private message

About 30min ago someone or some-bot posted a spam album to my FB account;
Click to see full size

Additionally they;
- Accepted all pending Friend requests
- Opened up Privacy Settings
- Tagged all Friends into the spam posts

I've since cleaned it all up, de-authorised all active sessions, changed password, enabled 2FA and login alerts.

I'm currently trying to figure out exactly how my account was compromised, suspect either;
- Password compromised through Facebook brute force attack (password was relatively strong and unique)
- Rogue Android app interfering with Facebook App (Android 4.4.2 rooted)
- Facebook CSRF or XSS vulnerability

My PC's, email and networks are pretty locked down (don't use public Wifi etc) so don't consider those as a point of access.

FB access log shows a suspicious login from a Sydney based IP (110.33.216.187) on Dec 18.

Click to see full size

Create new topic

TLD

687 posts

Ultimate Geek
+1 received by user: 152


  Reply # 1201671 21-Dec-2014 23:04
Send private message

That's worrying.  I've had two Oakley Sunglass posts to my FB account, and just deleted them.  The problem is I am not flash with FB, and didn't think to look deeper into it.  A quick Google shows it to be really widespread

http://truxtertech.com/2014/06/how-to-handle-those-sunglasses-tag-spammers-on-facebook/






Trevor Dennis
Rapaura (near Blenheim)

1245 posts

Uber Geek
+1 received by user: 137


  Reply # 1201677 21-Dec-2014 23:28
Send private message

There are some ray ban spam going on iMessage too. Kinda wrong target market for me as I prefer branded glasses with transitions and cheap polarised sun glasses



563 posts

Ultimate Geek
+1 received by user: 89


  Reply # 1201681 21-Dec-2014 23:42
Send private message

khull: There are some ray ban spam going on iMessage too. Kinda wrong target market for me as I prefer branded glasses with transitions and cheap polarised sun glasses


Hmm.. could possibly be looking at outdated iOS 7 on iPad 2 via Chrome as the attack vector..

Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.