Browse Definitions :
Definition

likejacking

Contributor(s): Ivy Wigmore

Likejacking is a variation on clickjacking in which malicious coding is associated with a Facebook Like button. The most common purposes of likejacking include identity theft and the dissemination of viruses, social spam and hoaxes.

A "Like" is an endorsement of a post, product, business or some other page content, registered by clicking the button associated with that item. There are two basic types of likejacking. Both involve a post that is likely to attract the user, such as an offer for a free gift card or a compelling video, and both spread through ill-advised or automatically generated shares and likes. The initial post may be enabled through a hacked account or the acceptance of a request to add a friend, who turns out to be a scammer.

In one variation, clicking on the post itself brings up a splash page that is coded so that if the user clicks anywhere on the page, it registers as a "Like" and shares the original post to the user's Facebook wall. The purpose of this type of exploit may be spreading a hoax or fraudulent promotion of a business or product.

In the other version, the developers responsible for the post add coding to the Like button that leads users through a series of pages designed to gather their personal information, such as surveys and membership applications. The scammer may receive payment for each completed survey. Applications for membership may require credit card information for "fee payment."

Here are a few common examples of likejacking:

  • An image of a sick or injured child with text claiming that Facebook will donate $1 toward the child's care for every like.
  • A false offer for a free voucher or gift card. These have included offers of $50, $100 and $250 give-aways from Starbuck's, Costco and Walmart.
  • A bogus offer for a free iPad, iPhone or other popular electronic device.
  • An image of an attractive young woman along with a compelling message such as "The Prom Dress That Got This Girl Suspended From School."

To protect yourself from likejacking, security experts recommend that you use caution in clicking, liking or sharing posts and be extremely skeptical about any free offers.

This was last updated in October 2012

Continue Reading About likejacking

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

SearchCompliance

  • risk management

    Risk management is the process of identifying, assessing and controlling threats to an organization's capital and earnings.

  • compliance as a service (CaaS)

    Compliance as a Service (CaaS) is a cloud service service level agreement (SLA) that specified how a managed service provider (...

  • data protection impact assessment (DPIA)

    A data protection impact assessment (DPIA) is a process designed to help organizations determine how data processing systems, ...

SearchSecurity

  • Web application firewall (WAF)

    A web application firewall (WAF) is a firewall that monitors, filters and blocks data packets as they travel to and from a ...

  • spyware

    Spyware is a type of malicious software -- or malware -- that is installed on a computing device without the end user's knowledge.

  • application whitelisting

    Application whitelisting is the practice of specifying an index of approved software applications or executable files that are ...

SearchHealthIT

SearchDisasterRecovery

  • business continuity plan (BCP)

    A business continuity plan (BCP) is a document that consists of the critical information an organization needs to continue ...

  • disaster recovery team

    A disaster recovery team is a group of individuals focused on planning, implementing, maintaining, auditing and testing an ...

  • cloud insurance

    Cloud insurance is any type of financial or data protection obtained by a cloud service provider. 

SearchStorage

  • DRAM (dynamic random access memory)

    Dynamic random access memory (DRAM) is a type of semiconductor memory that is typically used for the data or program code needed ...

  • RAID 10 (RAID 1+0)

    RAID 10, also known as RAID 1+0, is a RAID configuration that combines disk mirroring and disk striping to protect data.

  • PCIe SSD (PCIe solid-state drive)

    A PCIe SSD (PCIe solid-state drive) is a high-speed expansion card that attaches a computer to its peripherals.

Close