Social Network Spam Scare

Yesterday I experienced quite a scare.  Several client social networks I created and maintain all had fake member registration forms filled out. I immediately identified each registration as spam. Luckily all registrations must be manually approved by the administrator.  I found this to be a very sophisticated spam attack. In each instance the spammer even uploaded a required picture of a pretty girl.  The registration form field entries each had the same entry of “I’ll tell you later”.  This indicates an automated spam machine was used. The different email addresses entered all used the malinator.com domain.  All the social network administrators have been notified to be on alert.

With account registration moderation in place, the scenario above is a more controlled environment. So spam infiltrations are much harder to achieve. More mainstream popular social networks, like Facebook and Twitter, do not moderate registration. So spammers can slip in very easily to target legitimate members.

As mentioned in a previous article “Belated Spam Predictions“, spammers will continue to phish social networks, but use more sophisticated approaches. The goal is to collect not only personal information, but also retrieve information surrounding a person’s inner circle of friends and associates.

Continue to educate your email users to be prudent about information entered into their social network profiles. People must be more vigilant about the nonchalant acceptance with the comfort and trust in entering all types of information about themselves on social networking sites.

A balance must be created between personal branding or making networking connections, while keeping your personal information safe. If a phishing spammer gets to you, that means your friendship connections are also at risk.

It may seem innocuous to share your favorite books or movies on your profile. How about providing your real birth date as opposed to making yourself 10 years older or younger? So what, if you receive those automated or personal friend birthday wishes on the wrong day. At least you make your personal identification information safer. Your hobbies and interests may seem like it’s not a big deal. The more profile information you share, just makes it that much easier for cyber criminals to assume your identity. The more personal information shared, the higher the chances another person can become YOU to get closer to scamming your friends.

The next time you receive a “heart” invitation, a virtual “drink” or a “birthday” card from a friend on Facebook, look closer at the safety message displayed. It says “Allowing Birthday Cards access will let it pull your profile information, photos, your friends’ info, and other content that it requires to work.”  Each time the “Allow” button is clicked, your personal information and your friends list is being shared.

Social networks are powerful marketing and networking tools.   How much personal information do you think a person should share in a profile? Will the profile accuracy impact personal or business relationships?