Latest news
"Twitter Followers? Check this out New Facebook Followers has been developed. You can now see who's Viewed and Followed your Profile. Check your Top10 Followers here>>> [Link removed]," says the message that has been spreading on the microblogging service.
"The scammers bank on the fact that many Twitter users also have Facebook accounts and therefore at least a few will succumb to the temptation to see who has been viewing their profile and click the scam link," Hoax-Slayer points out.
Those who follow the link are taken to a page that urges them to click the "Like" button in order to promote the scam on their Facebook account, then to click on the "View Result" button that results in them being asked to install a bogus Facebook app:

But even if they do, they will not get to see who follows them on Facebook. Instead, they are asked to jump through another hoop: they are required to complete a survey to "verify your age and unlock the requested content."
This is your typical survey scam, and at no point will the user get a glimpse of its "Top 10 Followers".
Users who have fallen for it are advised to revoke the permissions for the aforementioned app and to clean up their Facebook and Twitter feeds of messages posted by it.


Spotlight

The security of WordPress plugins
Posted on 18 June 2013. | Checkmarx’s research lab identified that more than 20% of the 50 most popular WordPress plugins are vulnerable to common Web attacks, such as SQL Injection.

Information security executives need to be strategic thinkers
Posted on 17 June 2013. | George Baker, the Director of Information Security at Exostar, talks about the challenges in working in a dynamic threat landscape, offers tips for aspiring infosec leaders, and more.

Large orgs in denial about own security breaches?
Posted on 14 June 2013. | Over two thirds (66%) of large organizations said they either had not experienced a security incident in the last 12-18 months or were unsure if they had.

Vulnerability scanning with PureCloud
Posted on 12 June 2013. | nCircle PureCloud is a cloud-based network security scanning product built upon the companies' vulnerability and risk management system IP360.

Reactions from the security community to the NSA spying scandal
Posted on 11 June 2013. | Read on for comments on this scandal that Help Net Security received from a variety of security professionals and analysts.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.







