Malicious FB tagging a form of social engineering attacks

Cybersecurity and digital privacy company, Kaspersky has warned Facebook users against the current tagging malicious videos without their permission and by people they do not know.

Yeo Siang Tiong, General Manager for Southeast Asia at Kaspersky, made this pronouncement following the reports of some social media users to have been tagged in malicious videos without their permission and by people they do not know.

The incident is described by Kaspersky as “not the first time this has happened. But it appears to be an example of social engineering that cyber attackers use to get victims to respond by clicking on an infected attachment.”

Social engineering is a manipulation technique that uses human psychology that cyber attackers use to trick someone or to lure unsuspecting users to expose data, spread malware infection, or give them network or computer access.

Scams based on social engineering are built around how people think and act. Attackers may use emotional manipulation to convince you to take an irrational or risky action that you otherwise wouldn't. Fear, excitement, curiosity, anger, guilt, and sadness are emotions normally used to convince an unaware, clueless person.

On social media, trust is important among users and it is also essential in a social engineering attack. Users are usually tricked by accounts they follow, usually under the names of people they know and trust.

“As social engineering is an attack against a human being, not machine, we advise internet users to take basic measures to protect themselves,” stressed Tiong.

Thus, the company recommended some measures for Facebook subscribers to avoid these kinds of attacks. These include; think before clicking rule; set a strong password; take advantage of the security and privacy features of favorite platform and control who can tag or who can see the posts.

“Because Facebook regularly makes changes to their settings, it's worth your attention and time to check your own saved settings from time to time to update it for maximum privacy,” Kaspersky advised.