 Click to enlarge |
The social website has a ‘Wall' that allow users to post comments on friends' profiles. Spammers post various messages (online pharmacy shops, free ringtones) on it by purchasing hijacked accounts from identity thieves who were able to hijack the victim's account.
One of the spamvertised links has been confirmed to resolve to a web host that also serves content for several pill pushing sites, involved in a criminal fraud ring. Included in this ring is Canadian Pharmacy, Fortinet says.
The Fortinet Global Security Research Team advises social networking site users to be wary of phishing attempts: when confronted by a login page or upon clicking a link contained in a friend's message, carefully check the login page URL.