Facebook 'Clickjacking' Attacks Persist

Eager to see that Justin Bieber page your friends "liked?" You may want to resist the urge to click, say security experts. Facebook has been hit by a fresh round of fast-spreading "clickjacking" attacks that trick users—by means of an invisible page placed over one saying "click here to continue"—into posting messages saying they "like" a page.

The "clickjacking" or "likejacking" attacks appear, for now, to be more annoying than anything else, experts say, but they warn that hackers could take the method further. "At the moment, the attacks are more like old-school viruses—written for the heck of it to see how many fans they can get," an online security expert tells the BBC. "But our feeling is that it would be fairly easy for the bad guys to introduce some revenue generation for themselves." (More malware stories.)