{"id":13386,"date":"2018-09-19T08:10:04","date_gmt":"2018-09-19T16:10:04","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/09\/19\/news-7153\/"},"modified":"2018-09-19T08:10:04","modified_gmt":"2018-09-19T16:10:04","slug":"news-7153","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/09\/19\/news-7153\/","title":{"rendered":"A month of giveaway spam on Twitter"},"content":{"rendered":"

Credit to Author: Christopher Boyd| Date: Wed, 19 Sep 2018 15:00:48 +0000<\/strong><\/p>\n

We’ve observed a low level spam campaign working its way through Twitter, with just under 2,000 posts visible on public search since September 1.<\/p>\n

\"giveaway<\/a><\/p>\n

Click to enlarge<\/p>\n

The posts promote what appears to be CBD oil. For those who don’t know (And I was one of them\u2014still not sure if this oil is supposed to be inhaled or consumed, but anyway), CBD is short for\u00a0Cannabidiol, which is a chemical found in cannabis thought to have pain-relieving properties. It is often distilled into oil that can be used in many different ways for various ailments.<\/p>\n

The posts follow one of two formats. The first is a large image splash attached to each Tweet:<\/p>\n

\"Twitter<\/a><\/p>\n

Click to enlarge<\/p>\n

It says:<\/p>\n

\n

Have you entered into the giveaway yet for a bottle of [product name]?<\/em><\/p>\n

They are giving it away for FREE<\/em><\/p>\n

Follow these simple steps:<\/em>
Step 1: RE-TWEET this post!<\/em>
Step 2: Click the “Link” below to get your FREE [product name] for the last step!<\/em><\/p>\n<\/blockquote>\n

The second post format we’ve seen is just text with a referral link:<\/p>\n

\"Twitter<\/a><\/p>\n

Click to enlarge<\/p>\n

In both cases, the Tweets lead the curious clicker to a site located at<\/p>\n

cbdhive(dot)com<\/p>\n

This website’s Whois data is listed as domains by proxy, and it offers an email sign up for users to be the “first to know” about…well, no idea. It doesn’t say. I assumed the product was some sort of energy boost tablet, or maybe some kind of juice, and only learned of the medicinal oil connection after several bouts of Googling. All the visitor knows at this point is he has to sign up for something via email.<\/p>\n

\"frontpage<\/a><\/p>\n

Click to enlarge<\/p>\n

Once an email address has been handed over, the visitor will be taken to a second page that claims to offer various bundles depending on how many friends make use of the referral\/sign-up links. The options available are sharing it via Facebook, Twitter, and email.<\/p>\n

\"post<\/a><\/p>\n

Click to enlarge<\/p>\n

If you refer five friends, you get one month of free supplies. Ten friends, two months. If you can summon 50 friends, then they claim you’ll receive a full year’s supply.<\/p>\n

On our sign-up page, we were told “one friends [sic] have joined…keep checking.”<\/p>\n

I don’t know who that friend is, because I certainly didn’t invite anyone (much less have them join).<\/p>\n

We haven’t seen any evidence of the posts being automated, so it’s likely people are firing them off manually in the hopes of a freebie or 12.<\/p>\n

I can’t say we advise jumping on the free stuff bandwagon; it’s never actually certain if the people participating will receive their desired games, ringtones, or other gifts. In this case, there’s also zero information we can see on the site about what the product is, what it does, how you use it, or if it’s even allowed in whatever region you happen to live.<\/p>\n

Factoring CBD into the picture further complicates the matter because CBD is only legal in certain regions (globally)<\/a>, and under certain conditions. For example, CBD is legal in all 50 US states if it’s derived from the hemp plant. But if derived from marijuana, it’s legal in only eight US states. If prescribed by a doctor, it’s legal in 46 states. That’s not confusing at all.<\/p>\n

Same deal for shipping, come to think of it. Is it targeted to one area only? Is International shipping possible with CBD?<\/p>\n

I have no idea, and most likely neither does anyone else firing the links everywhere.<\/p>\n

Always be cautious around sets of identical posts promising you free gifts in return for performing specific tasks. Most of the time, you’re doing little more than acting as free brand promotion for someone else’s SEO team taking the day off. I’m all for boosting the brand and increasing the verticals, but that’s taking things a little too far.<\/p>\n

The post A month of giveaway spam on Twitter<\/a> appeared first on Malwarebytes Labs<\/a>.<\/p>\n

https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Credit to Author: Christopher Boyd| Date: Wed, 19 Sep 2018 15:00:48 +0000<\/strong><\/p>\n\n\n\n
<\/a><\/td>\n<\/tr>\n
We’ve observed a low level spam campaign working its way through Twitter, with just under 2,000 posts visible on public search since September 1. What’re they trying to sell this time? Some CBD oil!<\/p>\n

Categories: <\/p>\n