Member Avatar for MktgRob

I found this from a newsletter I receive on a regular basis. The link is to a column regarding the discovery of numerous malicious apps popping up in Facebook e-comm offerings. Worth a read, especially if you are doing anytype of advertising on Facebook.

http://www.webpronews.com/topnews/2009/08/21/facebook-security-becoming-a-bigger-issue

  • 2 Contributors
  • 2 Replies
  • 90 Views
  • 3 Days Discussion Span
  • Latest Post Latest Post by MktgRob

Dani AI

Generated

Good point from and a solid reality check from : popular social platforms attract both useful tools and risky third-party integrations. For advertisers the practical difference is process and controls — treat any app or partner like an external vendor before it touches a Page, ad account, or audience data.

Risk-reduction checklist:

  • Limit access with Facebook Business Manager and assign the least privilege needed for each role.
  • Require two-factor authentication on all accounts that manage Pages or Ads.
  • Inspect app permissions before connecting: anything that can post as a Page, read private data, or manage ads should trigger additional vetting.
  • Test new apps on a sandbox or a non-production Page and verify app review / domain verification status.
  • Audit connected apps and business integrations regularly (remove unknown entries and expired permissions).
  • Verify landing pages and creative URLs are HTTPS and owned/verified via Business Manager; avoid shortened links that hide destinations.
  • Monitor ad spend and payment methods for unexpected activity; set spend alerts and billing notifications.
  • Keep staff trained on phishing/social-engineering tactics that try to get admins to grant access.
  • Report suspicious apps to Facebook and keep logs of vendor contracts, SLAs, and technical contact info.

Note: Facebook UI and policy details change over time; platform controls and exact menu paths should be confirmed against current documentation. Official references for controls and app review procedures are available from Facebook (Business and Developer docs) and general web-security guidance from OWASP for validating integrations (Facebook Business Help, Facebook Developers docs, OWASP).

Recommended Answers

All 2 Replies

Member Avatar for InsightsDigital

Thanks for sharing. Unfortunately in any good pasture, weeds will pop up.

Member Avatar for MktgRob

Thanks for sharing. Unfortunately in any good pasture, weeds will pop up.

Weeds are one thing. These things are landmines!

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.