Social Networking and Security

There is an interesting post today in the security_fix blog about the use of social network accounts by cybercriminals. It appears this is a new avenue for phishing: hijack an account on Myspace or Facebook or some other social engineering site, and then post as the user with links to actual phishing or malware sites. As people trust links from folks on their friends list, they will click without thinking, and you know the rest from there.

So, even if a friend on LJ recommends a link, hover that mouse over it and make sure it is sending you to a place you can trust. If you want more information, just visit lj_security.

Forewarned is forearmed, and fourarmed doesn’t fit in a sweater well.