4 ms·
Original article: https://www.malwarebytes.com/blog/news/2025/08/adult-sites-trick-users-into-liking-facebook-posts-using-a-clickjack-trojan https://www.malware
by StrauXX 1y ago
Original article: https://www.malwarebytes.com/blog/news/2025/08/adult-sites-trick-users-into-liking-facebook-posts-using-a-clickjack-trojan https://www.malwarebytes.com/blog/news/2025/08/adult-sites-t...
The linked article just regurtitates the source.
- throwaway290 1y agoArs article links to Malwarebytes but Ars article is better. The headline is better, it's most interesting that they run code from svg. Ars also adds context how the same hole was also used before to hijack Microsoft accounts and also by the Russians. Whereas Malwarebytes is mostly about pornsite clickjacking to like Facebook posts (and complains about age verification). However it has a bit more technical details too. Read both I guess?
- lostmsu 1y agoWhat's the hole? Neither appear to say.
- throwaway290 1y agoI guess that obfuscated JS in SVG runs? Then it downloads the script that does shady stuff
- lostmsu 1y agoThat does not explain exactly what is wrong. The site could already run JS. It did not need SVG to do it.
- throwaway290 1y agoYeah I guess the original article is not clear on that. Other cases usually involved email but this is not