SmallBizResource Blog -- Security

LinkedIn Gets SuckedIn To Malware Mania

Posted by Gayle Kesten Thursday, Jan 8, 2009, 01:27 PM ET

Bad news in threes? Hackers are having a fun time with social networking sites, first with Facebook last month, then Twitter earlier this week -- and now LinkedIn.

As Computerworld reports: "Hackers have seeded LinkedIn Corp.'s business networking service with bogus celebrity profiles that link to malicious sites serving up attack code."

Unlike the other attacks, LinkedIn, itself, wasn't compromised, the article goes on to say. "Instead, criminals used the service to create phony profiles, gave them celebrities' names and slapped on the word 'nude' to further entice users."

Those who are enticed enough to click on URLs placed in the Web site section of such celebs as Beyonce, Victoria Beckham, and Kate Hudson wind up downloading malicious Trojan software, according to InformationWeek.

Trend Micro has posted an example of a bogus profile on its Malware Blog, adding that "cybercriminals are said to be using pre-registered accounts on social networks as launchpads for this type of attack. Such pre-registered accounts are reportedly being sold in the black market today."

Folks, are we really on LinkedIn to see nudie shots? Red flag, red flag! "LinkedIn is used almost exclusively by professionals to manage business contacts and keep in touch with former colleagues," a VNUnet article states.

And as bMighty security blogger Keith Farrell wisely points out, "Social networks are built around the creation and expansion of lists of trusted contacts -- which means that you need to be absolutely certain that the person or business you're linking to or following is who they say they are.

Smart advice, and especially so if you're doing business with Kirsten Dunst.

Security