Adult sites use malicious .svg files to rack up likes on Facebook

A number of adult websites are employing a cunning strategy to artificially inflate their likes on Facebook by utilizing malware embedded in .svg image files. These Scalable Vector Graphics files, known for their versatility in rendering graphics, are being manipulated to serve malicious purposes. The .svg format is unique as it is based on XML, allowing images to be resized without quality loss. This characteristic, however, comes with a security downside: the text within these files can include HTML and JavaScript, which can be exploited for various cyberattacks, such as cross-site scripting and denial-of-service attacks. Recently, the cybersecurity firm Malwarebytes reported that adult sites have begun distributing infected .svg files to certain users. When these users click on the manipulated images, their browsers automatically register a like for posts that promote these websites on Facebook. The complexity of this attack was heightened by the use of a customized encoding technique known as 'JSFuck,' which obscures the JavaScript, making it difficult to analyze and understand. This new tactic highlights the ongoing battle between website security and malicious actors seeking to exploit platforms for their gain. As technology evolves, so do the methods of cybercriminals, prompting the need for heightened awareness and robust security measures.