Scammers exploit interest in NBA finals to spread Facebook spam

Share this article:
Scammers exploit interest in NBA finals to spread Facebook spam
Scammers exploit interest in NBA finals to spread Facebook spam

As the end of the National Basketball Association (NBA) season approaches, security researchers are warning Facebook users about a spam campaign thriving off of mounting interest in the final games.

Satnam Narang, a security response manager at Symantec, started to see on Sunday a malicious campaign consisting of messages falsely advertising free streaming videos of this week's live finals.

The spam also includes a link to a Tumblr page hosting the “live streams,” where users are instead asked to install a Facebook application called “NBAFinals.” This app asks users to access their Facebook profile information, including their friends list and email address – and even posts messages on their timeline, further spreading the spam.

Scammers make money from the campaign by redirecting users from the Tumblr page to a plugin install page where affiliate advertisers track traffic.

According to Symantec, Tumblr has removed the pages used in the scams. The security firm also reported the campaign to Facebook.

Share this article:

Sign up to our newsletters

More in News

New backdoor 'Baccamun' spreads through ActiveX exploit

Symantec researchers revealed that the backdoor is dropped after attackers exploit a Windows ActiveX vulnerability.

Outdated browsers put U.K. users at risk of malware

A blog post on Check and Secure website said 70 percent of U.K. users haven't fully updated their internet browsers

Survey: 53 percent change privileged logins quarterly

A Lieberman Software survey highlights the issue or poor password management, even among security pros.