Who is still yearning to see who viewed their profile?

 

Introduction

At the beginning of 2014, Facebook passed 1.23 billion in monthly active users who shared their thoughts, pictures and videos with their friends and the public.

This huge mass of people forms a very alluring market for advertisers and companies, competing for creating communities of future clients.

But when the “security lights” go off, this audience is also targeted by thousands of cyber-criminals.

Facebook itself reported that between five and almost 15 million of its accounts were “undesirable” fakes created for spam or other purposes that violated its terms of service.

A Bitdefender study on over 850,000 Facebook scams revealed the top five bait categories that affect users worldwide through malware, spam and fraudulent attacks.

To tackle the mystery behind the higher and higher numbers of social scam victims, a team of behaviour analysts and psychologists working for the antivirus software provider offered insights on human psychology and explained who the most vulnerable users are.

Though human behaviour can be classified generically, it is less predictable than popular literature allows us to see, Bitdefender psychologists warn.

Exact user profiling is both non-viable and tricky – a trap that many practitioners fall into, because of the yet incomplete understanding of human brain.

Profiling has also become a trend sustained by the vivid need to justify plenty of services and industries, such as market segmentation or social media advertising.

Victim profiling may also lead us to believe we are less or not at all exposed to social e-threats, as we do not fit a specific vulnerable category.

There are many predisposition elements that are important when drafting a vulnerability prognosis, but they all need to be treated only as limited indicators, and not verdicts.

The biggest vulnerabilities appear because of general human dispositions that may hit any user at one point in his life. Of course, it is hard to acknowledge, even to ourselves, that we may have irrational behaviours or that we are blindly indulging in impulses we typically attribute to the less educated or the less informed.

Many examples in the last couple of years show even well-educated people give themselves up to inappropriate and even dangerous behaviours.

In 2008, New York governor Elliot Spitzer, known for his crusade against corruption and depravation, made headlines after hiring high-end prostitutes.

However, we have also noticed a strong correlation between victims and the less informed. Independent research shows over 90 per cent of those who have just ended a relationship are still checking their former partner’s activity on social networks. This natural reaction was frequent even before the social media era, being justified by people’s reciprocal wish to see if their ex still cares about them.

1. Guess who viewed your profile? – 45.50%

The most popular Facebook scam offers users the chance to see if they are still searched by a person for whom they may still have feelings for. Their judgment tells them to avoid clicking on such a lure, but this rational censorship will come along with big emotional consumption. They often don’t even need to believe the link hides emotionally important information, but they rather do it just to check things out.

Users have to almost believe the link hides something important to them. The danger is also supported by the lack of information regarding the features of social networks, as many users still believe there may be people gathering this data.

As people are emotional beings, the social trigger is always strong. A more technical explanation involves the neocortex, which often passes over the mechanisms pulling our emotional triggers.

We shouldn’t be surprised that “profile viewer scams” reach over 45,50 per cent of the total number of Facebook scams in the last two years. There is also an additional element helping hackers to trick millions of users ever year. The “profile viewer” message is customized, touching them on a personal level.

2. Facebook functionality scams – 29.53%

Facebook functionality scams – almost a third of the total number of scams – are based on the increasing importance of social network profiles and experience. The need to embellish your avatar is the universal need of managing one’s image. Any additional feature is viewed as a possibility to make one’s image and experience even better. Psychological triggers are easily activated.

All it takes for users -otherwise very sharp offline – is the lack of know-how regarding social networks and their features. In a world where apparel is so important, every extra feature is something users can’t say “no” to.

3. Giveaway scams – 16.51%

The natural reaction towards gift offers, spectacular gains, and bargains is deeply rooted in human psychology, and behavioural flaws are not specific to certain profile categories.

However, there are users more susceptible to becoming victims. Many other Internet scams are based upon users’ wish to get the most incredible offer at extremely low prices for products they may need or not.

During the evolution of the human mind, having a competitive advantage that gets you ahead of the crowd was such a rarity that people couldn’t say “no”. The world was, of course, less complex as nowadays.

Game scams promising credits and hacks may also be placed in this generic giveaway category, but with a more
targeted audience – passionate gamers.

4. Celebrity scams – 7.53%

Celebrity scams may also have deep roots, dating since before the debut of the World Wide Web. Celebrities represent both success models, and items that set social trends. Their stories become ours, and voyeurism helps us live the life and experience that we otherwise couldn’t.

Our studies show that voyeurism and appetite for celebrity news is not reserved for the “uneducated,” though they are often the most exposed. The relatively low percentage of users tricked by fake celebrity videos (7,53%) is only diluted by security lobby or the fact that many users have been victimized before. If scammers will invest in more inventive and less aggressive messages, this type of scam could gain even more traction.

5. Atrocity videos – 0.93%

Studies revealed that kids’ empathy in the last 30 years has drastically decreased, while their tolerance towards violence intensified.

Human curiosity is also universal, and under the media pressure of the last decades it may be harder to get reactions and significant emotional effects other than by raising the level of explicit violence.

Children and teenagers are the most exposed to atrocity video scams, and we expect their number to intensify in the future.

Conclusions

The Bitdefender analysis on over 850,000 scams spreading on Facebook timelines in the last couple of years revealed the top five categories of baits used by cyber-criminals to trick victims.

While almost half of the social e-threats praise on users’ curiosity to check who viewed their profile, other scams attract victims with fake features the social network doesn’t have (dislike buttons, different timeline colors), or bogus giveaways.

Though less present, the last two categories of Facebook scams are growing at a steady pace. Celebrity sex tape scams and atrocity news (such as murders and child abuse) are attracting thousands of victims with every new campaign, as they also “include” alluring videos.

In the attempt of creating a profile of the most gullible victims, Bitdefender’s behaviour analysts discovered there is such a wide range of users falling for Facebook scams, that an exact profiling would be too restrictive. In conclusion, anyone could fall victim to a Facebook scam at one point in his life, as cyber-criminals always pull the right psychological triggers.

Whitepaper authored by:
Nansi Lungu, Bitdefender Behaviour Analyst and Psychologist
Delia Irina, Bitdefender Behaviour Analyst and Psychologist
Bianca Stanescu, Bitdefender Security Specialist

About Bitdefender

Bitdefender is a global company that delivers security technology in more than 200 countries through a network of value-added alliances, distributors and reseller partners.