Another clickjacking scam has hit Facebook, tricking hundreds of thousands of users to post messages to their pages saying that they like the malicious link, security firm Sophos said on Tuesday.

This is one of the messages being circulated in the latest clickjacking scam on Facebook.
(Credit: Sophos)

Like most of these scams, this one relies on social engineering and piques the interest of prospective victims with messages like:

• "LOL This girl gets OWNED after a POLICE OFFICER reads her STATUS MESSAGE."

• "This man takes a picture of himself EVERYDAY for 8 YEARS!!"

• "The Prom Dress That Got This Girl Suspended From School."

• "This Girl Has An Interesting Way Of Eating A Banana, Check It Out!"

Clicking on the links takes the visitor to what appears to be a blank page with just the message "Click here to continue." However, hidden in the page is code called an iFrame written for Windows-based systems. When a visitor clicks anywhere on the page the iFrame publishes the message to the visitor's Facebook page.

More: http://news.cnet.com/8301-27080_3-20006478-245.html