With Facebook’s recent IPO filing revealing that it holds over 100 petabytes of photos and videos from its massive global base of 845 million users, it’s no secret that hiding in those millions of profiles are many fake accounts created and operated by cybercriminals.
Today, Barracuda Networks, a provider of security and data protection solutions, released findings from a study comparing fake Facebook profiles vs. those of “real” profiles. It the study, Facebook: Fake Profiles vs. Real Users, Barracuda researchers analyzed a random sampling of 2,884 active Facebook accounts to identify key differences between average real user accounts and fake accounts created by attackers and fraudsters.
Highlights from the study, presented today by Paul Judge, Chief Research Officer at Barracuda Networks at the 2012 Kaspersky Threatpost Security Analyst Summit in Cancun, Mexico include:
• Almost 60 percent of fake accounts claim to be bisexual, 10 times more than real users
• Fake accounts have six times more friends than real users, 726 versus 130
• Fake accounts use photo tags over 100 times more than real users, 136 tags per four photos versus one tag per four photos
• Fake accounts almost always (97 percent) claim to be female, as opposed to 40 percent for real users
Facebook, which consistently fights to keep attackers out of its network, most recently announcing its lawsuit against a marketing firm accused of “spreading spam through misleading and deceptive tactics.”
“Also, researchers have shown how friending malicious accounts can lead to account takeover using Facebook’s trusted friend account recovery,” Judge continued. “We have analyzed thousands of fake accounts to determine features and patterns that distinguish them from real users, and created a feature-based heuristic engine to distinguish real users from fake profiles.”
“Different social media platform providers are attempting to fight issues such as automation and fake accounts from within,” noted Noa Bar-Yosef, a Senior Security Strategist at Imperva in a recent SecurityWeek column. “However, these initiatives are still quite immature, and there’s a clear conflict of interest between social networks’ attempt to remove fake accounts and their desire to show constant growth.”
“An inherent issue of social networks is the lack of trust and proper identification,” Bar-Yosef added. “For businesses this means that the social platforms do not provide a solid way to tell apart the real owner of a brand from imposters and imitators who try to take advantage of the popularity of a specific brand, to abuse or to erode it. At the other end, it is not possible to verify the identity of message writers and there are no real tools to evaluate the trustworthiness of the messages or their content.”
Barracuda’s study analyzes data collected from its Barracuda Profile Protector, a free tool that analyzes and blocks malicious activity on Facebook and Twitter, along with public data collected from streams and network crawling to demonstrate how users typically operate. The study illustrates how attacks on Facebook are structured to exploit the “friendship” concept and trust of widely-used applications. A variety of machine learning techniques are used to analyze shared URLs, profile images, profile information, and connections with other users to reveal associations, weak and strong, between malicious users.
“Likes, News Feeds and Apps have helped lead Facebook to its social network dominance and now attackers are harnessing those same features to efficiently scale their efforts,” Judge concluded. “These fake profiles and apps give attackers a long-lived path to continuously present malicious links to innocent users.”
