
A recent report highlights a significant e-commerce fraud campaign involving over 600 fake websites that target Facebook users. The scam utilizes deceptive advertisements on Facebook to lure individuals into providing personal and financial information through these fraudulent sites. The campaign comprises 608 fake shops, primarily accessed via mobile devices, which aim to steal credit card information. Users are advised to remain vigilant and report any suspicious ads. Additionally, cybersecurity researchers have raised concerns about dangerous cross-site scripting (XSS) vulnerabilities in RedCAP, which could threaten academic and scientific research. Another report indicates that attackers have hijacked Facebook pages to promote malicious AI photo editing software. Furthermore, a study by Salt Security revealed that combining OAuth features with XSS vulnerabilities could allow unauthorized account access on platforms like Hotjar and Business Insider.
By combining OAuth features with an age-old cross-site scripting (XSS) vulnerability, @SaltSecurity researchers were able to take over any account in @hotjar and Business Insider online services. #cybersecurity #infosec #ITsecurity https://t.co/f69cqWApd4
Attacks on Bytecode Interpreters Conceal Malicious Injection Activity: https://t.co/5NlEqydcoM by darkreading #infosec #cybersecurity #technology #news
Attackers Hijack Facebook Pages, Promote Malicious AI Photo Editor: https://t.co/xVmQmVLdpz by darkreading #infosec #cybersecurity #technology #news



