Facebook identifies those behind coordinated spam attack

By | November 16, 2011, 5:25am PST

Summary: Facebook says it knows who is behind the coordinated spam attack resulting in links, videos, and images depicting pornography, acts of violence, self-mutilation, and bestiality on the site.

Over the last few days, Facebook users have been experiencing a flood of links, videos, and images depicting pornography, acts of violence, self-mutilation, and bestiality. Facebook confirmed the NSFW problem yesterday morning and then in the afternoon revealed it was hit by a coordinated spam attack leveraging a browser vulnerability. Today, the social networking giant has acknowledged it knows who orchestrated the whole thing and has eliminated most of the spam on its service.

“In addition to the engineering teams that build tools to block spam we also have a dedicated enforcement team that has already identified those responsible and is working with our legal team to ensure appropriate consequences follow,” a Facebook spokesperson said in a statement. He refused to disclose their identities or to discuss what exactly the social networking giant has in store for the individuals.

Three months ago, Spam King Sanford Wallace surrendered to the FBI after being indicted by a federal grand jury in San Jose for spamming Facebook. It took over two years, but Facebook eventually put him in his place. Let’s hope the company manages to do the same to those behind this attack.

Some have blamed the hacktivist group Anonymous, which was rumored to be planning to take down the social network on November 5. Three months ago, the larger collective group made a point to say it did not support such a takedown operation and in the end it did not take place: the service has remained operational all month.

Facebook is still up and running, but it was exploited in a coordinated way. There is no proof that Anonymous was behind the flood of inappropriate content (normally such an attack would result in confirmation from Anonymous, in some shape or form), but it only takes a few members or ex-members to pull something like this off.

During the attack, some members of the social network saw violent and/or pornographic pictures show up in their News Feeds without their knowledge that they have allegedly Liked. Others were told by their friends that they were sending requests to click on links to videos, sending out bogus chat messages, or writing mass messages and tagged photos leading people to believe they are in the link. If you were affected by this, please see Facebook virus or account hacked? Here’s how to fix it.

According to the company, this spam attack all started with users being tricked into pasting and executing malicious JavaScript in their browser’s URL bar. This resulted in them unknowingly sharing the offensive content. Palo Alto says it has been shutting down the malicious Pages and accounts that attempt to exploit this flaw and has been giving users guidance on how to protect themselves. Overall, the company claims it has managed to drastically reduce the rate of the attack, but wouldn’t share actual numbers.

Users are unsurprisingly outraged, and as is typical with Facebook members, many are already threatening to close their accounts. I personally have not seen any such Facebook activity on my own profile, and neither have my friends. Still, although the service’s users complain about a lot of small things, this is not one of them.

In addition to the identities of the perpetrators, Facebook is not sharing other details. We still don’t know about the browser vulnerability: how it works exactly and which versions of which browsers are affected. It’s also not known how many of the site’s 800 million active users were affected or how much inappropriate content was shared. In fact, Facebook has been careful not to divulge too much about the attack, especially not numbers.

See also:

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Emil Protalinski has covered the tech industry for five years for multiple publications.

Disclosure

Emil Protalinski

Emil has nothing to disclose.

Biography

Emil Protalinski

Emil Protalinski has covered the tech industry for five years for multiple publications, including Neowin for two years and Ars Technica for three years. He has written 1,000s of articles for both, with a particular focus on scrutinizing Microsoft products and services. Recently, Emil has expanded his coverage to non-Microsoft technologies, including the social networking giant Facebook.

Talkback Most Recent of 26 Talkback(s)

  • RE: Facebook identifies those behind coordinated spam attack
    'Users are unsurprisingly outraged, and as is typical with Facebook members, many are already threatening to close their accounts.'

    Shouldn't they be outraged that anybody, even Facebook junkies, would be stupid enough to paste the links that caused the problems in the first place?
    ZDNet Gravatar
    zdnet@...
    16th Nov
  • Threatening to close their accounts?
    @zdnet@...
    I'll guess that with most of these people, it's like threatening to quit drinking, smokingm or drugs.

    Real easy to say, real hard to do.
    ZDNet Gravatar
    William Farrell
    16th Nov
  • Hey...I've got a great solution...
    ...don't use this LAME social networking BS. Then you don't have to worry about the crap that emanates from these dumb sites.
    ZDNet Gravatar
    IT_Fella
    16th Nov
  • RE: Facebook identifies those behind coordinated spam attack
    @IT_Fella Yes, Social networks seem to invite stupid. Lot's of different levels of computer users. Plus its a very spreadable form factor too.
    ZDNet Gravatar
    jscott418
    16th Nov
  • RE: Facebook identifies those behind coordinated spam attack
    @IT_Fella
    And if I go live in a cave I don't have to read your BS post. Hey, maybe I can even use a postal pigeon, that way I won't have any spam! What's your point?
    ZDNet Gravatar
    belli_bettens@...
    18th Nov
  • RE: Facebook identifies those behind coordinated spam attack
    Browser vulnerability (so they say) or a Facebook flaw? Hmmm...
    ZDNet Gravatar
    waterdogz
    16th Nov
  • RE: Facebook identifies those behind coordinated spam attack
    @waterdogz
    A user flaw. The starting point was a person having to copy and paste the malicious address into their address bar.
    ZDNet Gravatar
    ImRaptor
    16th Nov
  • So?
    @ImRaptor
    So Facebook says... No confirmation on that.
    ZDNet Gravatar
    Sceptical Observer
    16th Nov
  • RE: Facebook identifies those behind coordinated spam attack
    @ImRaptor Which is again a FB flaw! The user is not to blame! Anything you can do against their policy and infringes with FB to do proper business is a flaw, originating from a user or not, does not matter! When I could just upload a certain file into my profile and cripples the whole FB system, it would still be their flaw, although I started it. I would never to so, even if possible, but would not care if it really happens!
    ZDNet Gravatar
    8Limes
    16th Nov
  • RE: Facebook identifies those behind coordinated spam attack
    @ImRaptor totally agree. Morons shouldn't use the internet. it's for big boys.
    ZDNet Gravatar
    Drobilliard
    22nd Nov
  • RE: Facebook identifies those behind coordinated spam attack
    @waterdogz Click jacking so really it's a user vulnerability mixed with java and flash.
    ZDNet Gravatar
    ruphus1
    16th Nov
  • RE: Facebook identifies those behind coordinated spam attack
    99% of those spam attacks can be avoided if the end user used a little bit of common sense. I have been using Firefox with ad blocks and java blocks for years; yeah internet is a little more boring but I can sit on a infected website for days and nothing with happen to any of my computers. Lets not give Anonymous more credit than they deserve. They go after reported faults in IE after its been reported. Those children could not beat their way out of a wet paper bag if their lives depended on it. These are mostly children with way too much time on their hands and no social skills at all; they sit on a PC all day and purchase programs or look up faults in IE. Yup I'm shaking in my boots. If people would use common sense Anonymous and all the other children would have to find real jobs.... Almost forgot what about those threats to the Cartel releasing their friend. Yeah not only did it not happen haven't heard from the children either since the Cartel play unfairly like Anonymous and the Cartel play for keeps. Thus Anonymous went hiding hoping their friend doesn't release the real names of the children who make up Anonymous. Am I worried about them finding me, nope not the least come get me children.
    ZDNet Gravatar
    guitarest
    16th Nov
  • RE: Facebook identifies those behind coordinated spam attack
    @guitarest FB is offering a popular free service and the end user can NOT be held responsible for their security issues, no matter how dumb. And this has nothing to do with ANONYMOUS either. The user is not to blame! You got people with 100+ years of age using it, they would not know better, nor how to avoid it! Have respect! Java blocked? Tells me, you miss a little common sense as well! There is no need for that, when you have common sense!
    ZDNet Gravatar
    8Limes
    16th Nov
  • RE: Facebook identifies those behind coordinated spam attack
    @guitarest
    I guarantee you would not post that to any anonymous or hack sites. From basic reading what you said you sound very vulnerable and would be an easy target. You have way to much cockiness which usually means a lack of ral hack knowledge.
    ZDNet Gravatar
    Fletchguy
    16th Nov
  • RE: Facebook identifies those behind coordinated spam attack
    Oh I have, not the least bit scared and I have more expirence on my days off then most here who are pretend techs.
    ZDNet Gravatar
    guitarest
    17th Nov

Talkback - Tell Us What You Think

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources