Friday, May 27, 2011

Facebook “ Baby Born Amazing effect – webCamera Big Baby Born ! ” Scam spreading fast.

By Cesar Ortiz
In this likejacking attack, users are taken to click a hidden “Like” button disguised as a video “Play Button” for a fake video screen. The intent behind all this malicious malware is to take users by deception to a fake a “big baby born video” that has to his right an advertising for which the scammer gets paid for clicks, an add for a body building item, in our scam analysis. The video will play, but what users will see is a disgusting bearded guy using the mirror effect on his web camera to make it look like female genitalia. Warning: This picture is grossly offensive.

Please, let’s pretend you are the user for a moment; someone has to do the dirty job. When you receive the message from one of your friends, a black video screen with a white play button will pop up. The video is titled "Baby Born Video - Amazing Effects".  At the button of the video, letters in red read “If Play Button don't work please click on the Like button and Confirm, then you can watch the Video”. This is where the trick starts. If you press the white play button, and without you knowing it, the malware will generate a “Like” message to all your friends and immediately send the same message that you originally received to all of them.

To clean up this mess, follow these steps, in your own Facebook messages page, find the related message and select "Remove post and unlike", go to your Profile and select  “Activities and Interests”, “Other pages you like” and remove all the pages related to this scam by selecting the “Remove Page” button. Notify all you friends so that they can remove this scam following the same procedure. We have had reports of friendships being at risk because users are blaming their friends for “sending” them this bad taste “Baby Born Amazing effect” message. Please bear in mind that the friend did not sent the message willingly. The friend was tricked into sending the message unknowingly. You can blame your friend for being XYZ (you assign the word yourself), at the very least. Who will like to see a video of a big baby being born? Unless, you are a medical student.

Update: July 01, 2011 If you experience problems clearing this attack in your Facebook account , please click the "comments" link below this post for solutions given to us by our readers.

14 comments:

Anonymous said...

I cant remove it from the activities and interest...

What should I do?

Anonymous said...

Its me again. The problem I had was that you couldn't remove the page from Activities and Interests. It was saying that " Sorry, your connection has failed. Please try again"

And I did that, tried again like 20times. I didn't had connection problem. but I tried again and after like 20 times. you could see the undo button and then go out of info and come back, nothing left :)

Cesar Ortiz said...

Most likely Facebook was partially down during the time you tried to remove the culprit "Activities and imterest" page option. I am glad you where able to clean up this one.

Anonymous said...

The reason it wouldn't let you delete it is because you don't need to remove it from other pages once you've deleted it from the wall - deleting from the wall automatically removes it from your "likes".

Cesar Ortiz said...

Thank you for the tip.

Anonymous said...

I can't get it out of my interests either, I marked it as spam' straight away, but its still in my list of pages liked. Theres no facebook page to click unlike so how do I get it off there?

Cesar Ortiz said...

Go to your profile. Click on the "Info" tab right next to the "wall" tab at the top of the screen right underneath your name. Next to each bit of information you've posted previously, there is an "edit" button. Click here. Then you can highlight the information you want to delete with your mouse and click the backspace button on your keyboard. Then hit "save changes" and the information will be deleted

Anonymous said...

You can also go to just to the right of where the post is on your wall and a little x will appear. Click the x and you can mark as spam, or remove post and dislike. I just got this and fortunately this blog was here to help me get rid of it. I also changed my password to be on the safe side.

Cesar said...

Hello Paty: We have seen this one before. Provided you are properly logged in to your account, Your best bet is remove your cell phone battery, wait 30 seconds and replace.

Heathr said...
This comment has been removed by the author.
Heathr said...

I am having difficulties removing this link from my Activities and Interests. I removed it from my wall as soon as it posted, which was about three weeks ago. I noticed it in my "likes" about two weeks ago. I never "liked" it in the first place, it automatically posted to my page. When I press on remove, it switches to undo. That's when it should of been gone but its still there... I have been doing this for the last two weeks. I tried notifying Facebook but I have not seen any results. What can I do now to get this link off of my page? Thank you.

Anonymous said...

I accidentally clicked on the video and once I saw it was a scam, I clicked the "X" and it was removed from my News Feed and Wall. That was about 2 weeks ago. Today I am finding that it is under my "Interests" as a page I "Like". I clicked on it again to "unlike" it but it takes me to a Page Not Found site. I had to hide all of my Interests and Activities so nobody will see this vagina on my profile and think I am "liking" pornography. I have coworkers on my page.. this can really be a bad thing! I reported it to Facebook and I haven't heard back from them. I have no idea how to remove this page from my "Interests" as a page I like. Like I said before-- already "X"ed it 2 weeks ago from my News Feed and my Wall... now it is coming back to haunt me!

Anonymous said...

@Starry Eyed Heather I am going through the same problem! And I too contacted Facebook and reported it.. they haven't done Jack Squat about it! They haven't even responded! I am ready to leave Facebook because of this!

Cesar Ortiz said...

Starry Eye: Hello, several people have experienced the same "come back" problem on this hack you are experiencing. They have cleared the problem by going to your Internet browser and clearing all your history and cache memory. It might be a script routine that activates via the browser cache so that it will persist even when you have deleted the related post. Try that, Good Luck.