Cyber attacks spread via Facebook double in one year

Sharing posts on Facebook has become much more dangerous over the past year, say security experts Norton - scams targeting the social network have doubled.

Scams targeting Facebook users have doubled in the past year.

Sharing posts on Facebook has become much more dangerous over the past year - scams targeting the social network have doubled.

Scams often take the form of links shared via the social network - fake videos, or links to offers such as free iPads - which try to trick unsuspecting users into downloading files or handing over credit card details.

The volume of spam email has actually fallen, as criminals switch to these new, more effective tactics. The rise was reported in the Norton 2013 Internet Security Threat Report, released today.

Using smartphones such as Android has also become much more risky in the past 12 months - with malicious software targeting smartphones rising by 58%, aiming to siphon information directly from phones. 

Using iPhones seems to be a safer choice - only one threat was detected for Apple's operating system in 2012, compared to 103 for Google's Android, the world's most popular mobile OS.

[Related: Are smart watches the next big trend in tech?]


A third of mobile malware was designed to steal information with 15% aiming to track the user and 8% hoping to reconfigure a device.

More sinisterly, there was a 42% rise in targeted attacks last year - where cyber criminals research the personal information, jobs and interests of victims before sending emails.

A third of such attacks were directed against small businesses - with criminals aiming to fool employees into clicking infected links by masquerading as colleagues or as IT departments.

Even legitimate websites have become sources of infection - with "Watering Hole" attacks targeted at popular websites, aiming to infect visitors.

One major site targeted in one attack was related to human rights.

Ransomware is another increasing problem - targeting web users who might feel guilty about the sites they have visited. A huge warning seeming to be from the police flashes on screen, demanding money for a "fine".

Computers are often locked until users pay up - and the tactic is surprisingly successful.

Norton's security expert Richard Clooke said: "It is now becoming more sophisticated than ever, belittling and threatening consumers into paying large sums."

Many users stump up the amounts asked for - which range from $50 to $400 - in order to release their computer from the scammers' grip, as they fear they may have done something wrong and so don't want to own up just in case.

The report warned: "The ransom is presented as a fine for criminal activity online. In some cases, ransomware also takes a photo of the victim using a webcam and displays this image in the locking screen, which can be unnerving for victims."

Mr Clooke said: "There are so many common misconceptions around online security, as seen in this year's report.

"The results have shown it is still crucial for Norton to continue to educate consumers on how they can help protect themselves from acts of cybercrime."

One such misconception is that Mac owners are safe. However, the report warns one single threat was found to infect 600,000 Apple computers during 2012.

There was some good news, however, with email spam volumes decreasing once again. These still account for 69% of all messages received though, with half now related to dating and sexual themes, which accounted for just 3% back in 2010.

During 2012, one in 291 emails were judged to contain viruses with one in 414 messages being related to phishing. However, in the UK it becomes more prevalent, according to Norton, with the numbers becoming more common. Here one in 163 are viruses and one in 191 are related to phishing, making the UK the third most popular destination for the scams.

There was also an increase noted in the levels of industrial espionage and data theft with manufacturing industries the most targeted, facing double the number of attacks compared to those aimed at Government.

Major threats during 2012 included a data breach at LinkedIn, which exposed millions of accounts; Windows malware discovered in Apple's App store within an application; and hackers exploiting a vulnerability in Tumblr to spread spam.

In total, 5291 new vulnerabilities were discovered in 2012, up from 4989 in 2011 but actually down from the 6253 found in 2010. However, new mobile vulnerabilities were up to 415 last year compared to just 163 two years previously.

Apple's Safari web browser was said to have the most vulnerabilities in 2012, followed by Google Chrome, Mozilla Firefox and then Microsoft's market-leading Internet Explorer.

Looking ahead, Norton experts warn of a rise in State-sponsored cyber attacks as well as those by national activists. They also believe the increase in smartphone social network use by teenagers will become the next battleground for cybercriminals as well as more intricate and threatening ransomware appearing claiming it will delete files unless a payment is made.