What is likejacking? - Definition from WhatIs.com

Likejacking is a variation on clickjacking in which malicious coding is associated with a Facebook Like button. The most common purposes of likejacking include identity theft and the dissemination of viruses, social spam and hoaxes.

A "Like" is an endorsement of a post, product, business or some other page content, registered by clicking the button associated with that item. There are two basic types of likejacking. Both involve a post that is likely to attract the user, such as an offer for a free gift card or a compelling video, and both spread through ill-advised or automatically generated shares and likes. The initial post may be enabled through a hacked account or the acceptance of a request to add a friend, who turns out to be a scammer.

In one variation, clicking on the post itself brings up a splash page that is coded so that if the user clicks anywhere on the page, it registers as a "Like" and shares the original post to the user's Facebook wall. The purpose of this type of exploit may be spreading a hoax or fraudulent promotion of a business or product.

In the other version, the developers responsible for the post add coding to the Like button that leads users through a series of pages designed to gather their personal information, such as surveys and membership applications. The scammer may receive payment for each completed survey. Applications for membership may require credit card information for "fee payment."

Here are a few common examples of likejacking:

  • An image of a sick or injured child with text claiming that Facebook will donate $1 toward the child's care for every like.
  • A false offer for a free voucher or gift card. These have included offers of $50, $100 and $250 give-aways from Starbuck's, Costco and Walmart.
  • A bogus offer for a free iPad, iPhone or other popular electronic device.
  • An image of an attractive young woman along with a compelling message such as "The Prom Dress That Got This Girl Suspended From School."

To protect yourself from likejacking, security experts recommend that you use caution in clicking, liking or sharing posts and be extremely skeptical about any free offers.

This was last updated in October 2012
Contributor(s): Ivy Wigmore
Posted by: Margaret Rouse

Related Terms


  • Anonymous

    - Anonymous is a loosely organized hacktivist collective created to promote free speech, unimpeded access to information, and transparency in government and corporate activities. (WhatIs.com)

  • threat actor

    - A threat actor is an entity that is partially or wholly responsible for an incident that impacts – or has the potential to impact -- the security of an organization. (WhatIs.com)

  • Alice and Bob

    - Alice and Bob are commonly-used names for participants in security scenarios that involve cryptography. Alice represents Person A and Bob is a placeholder for Person B. (WhatIs.com)


  • Security threats and countermeasures

    - Terms related to security threats, including definitions about anti-virus programs or firewalls and words and phrases about malware, viruses, Trojans and other security attacks.

  • Internet applications

    - This WhatIs.com glossary contains terms related to Internet applications, including definitions about Software as a Service (SaaS) delivery models and words and phrases about web sites, e-commerce ...

Ask a Question About likejackingPowered by ITKnowledgeExchange.com

Get answers from your peers on your most technical challenges

Tech TalkComment



    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.