On this page, the play button of the video window hides a malicious script which either triggers a “Like” – in order to propagate the scam –, or it further redirects victims to another fake video page that utilizes the Cost Per Action advertising method to unlock an alleged YouTube video.
However, after a certain period, victims who don’t press the play button are automatically presented with a message that reads “Merry Christmas!” after which they’re told that they won a prize from retailers such as ASDA, Best Buy or Walmart.
This is the point where users are directed to sites that support affiliate programs. These services are not illegal, but the crooks are relying on the Facebook posts to draw as many users as possible with their affiliate IDs.
By accessing the site with the cybercriminals’ affiliate ID, victims are actually helping the crooks make money.
One noteworthy aspect of this campaign is the fact that the scammers are relying on compromised freedns.afraid.org accounts to host the scam sites. freedns.afraid.org is a service that allows domain owners to benefit from free DNS services.
Fortunately, experts say that Facebook has this campaign under control and the number of scam posts has decreased. However, users are still advised to avoid such videos and voucher offers since similar operations might be launched at any time.
Post a Comment
I'm certainly not an expert, but I'll try my hardest to explain what I do know and research what I don't know. Be sure to check back again , after moderation i do make every effort to reply to your comments .