Trusted websites are good sources of income for cybercrooks

Today cyber criminals are trying to mislead Internet surfers by flooding the cyber space with fake URLs that include words like FaceBook, MySpace and Twitter, as reported by Websense Security Labs. These bogus domains are developed to lure unwitting victims into giving away their sensitive personal information such as passwords, bank account details and PIN numbers. Besides, many of these fake websites try to install malicious applications onto the users’ PCs.

"These new threats illustrate that attackers will continue to target Facebook, MySpace and Twitter, along with other social networking sites, for three reasons," said Charles Renert, senior director, advanced content research, Websense. "These Web sites are popular -- fraudsters are able to target lots of victims; people trust the content on it -- because they think it's from other people in their network; and they are easy to compromise because they allow anybody to create and post content. Traditional Web filtering is not enough to protect users from threats on trusted sites, and isn't enough to keep up with fraudsters generating new URLs almost instantaneously to avoid detection. Only real-time analysis of Web content can prevent users from being exploited by this attack."

The most common fake site used to dupe people is fake FaceBook sites. According to WebSense, the fake URLs include examples such as unblock.facebookproxy.com. Over 200,000 fake FaceBook URLs were found by the company.