Facebook users once again been hit with a Likejacking ploy and Zeus variant, in the latest scam, Sophos reports "users receive a message, allegedly coming from one of their friends that states "I can't believe a GIRL did this because of Justin Bieber" coupled with a link to a YouTube knock-off site called "FouTube"."
However, the Facebook "Like" option leads to a likejacking scam, resembling many of the attacks that circulated on Facebook earlier this year, according to Chester Wisniewski of Sophos. Instead of spreading malware, the attack displays a survey and tricks users to subscribing to an exorbitant SMS services rate on their mobile phones. The attack also displays an offer to purchase Facebook Groups/Fan pages, supposedly to help propagate the scam.
Experts say that this attack differs from others in that it exploits users who "Like" the video.
"Most Facebook attacks are rogue Facebook apps rather than simply liking a Web page.". "This one is quite poorly crafted, yet it's still spreading quite quickly amongst Facebook users who can't seem to get enough Justin Bieber."
Those users who've accidentally "Liked" the Justin Bieber Web page should visit their Facebook Wall and remove the "Like," Wisneiwski recommended.