Michael Jackson sparks celebrity death hoax epidemic

happygeek 0 Tallied Votes 260 Views Share

No sooner had the news of the untimely hit the Internet than the vultures started circling. For once it was not the gossip columnists and tabloid journalists digging up the dirt, but rather spammers and hackers looking to exploit a golden opportunity to distribute their wares and expose a very sick sense of humour.

The very fact that there has been so much media coverage of the Michael Jackson death, and at around the same time Charlie's Angels actress Farrah Fawcett lost her battle for life, pretty much paved the way for the spammers to be honest. Any campaign could be guaranteed a boost in click-throughs just by linking it with those deaths, especially Michael Jackson of course. But a more sinister trend also started to emerge over the last week, with emails arriving in my inbox which claimed to link to news stories and videos carrying exclusive breaking news of other celebrity deaths. Of course, the celebs in question were alive and well - and the links were the usual malware infested crap, but people would still be clicking through, bet your bottom dollar.

Perhaps the sickest twist has hit Twitter though, not least because there is no malware payload and no spam to shift. In the past I have put forward the theory that celebrities might be killing Twitter but now it seems that the reverse is true. Some folk have been hacking into celebrity accounts and announcing their deaths apparently for no other reason than to 'have a laugh' which is about as sick as you can get.

According to security expert from Sophos "The fake story of Britney's death was posted to her Twitter followers via the TwitPic service, which automatically forwards messages to the associated Twitter account. There are a number of ways in which messages can be posted on TwitPic, including sending a picture to a unique email address. It is thought that hackers used this method to post the fake message, which would have involved cracking a four digit PIN code."

Certainly this would appear to be the case as far as Britney Spears is concerned, as her hugely popular Twitter account with two million followers announced "Britney has passed today. It is a sad day for everyone. More news to come." This is not the first time the Britney has come under Twitter attack. At the start of the year her hacked account posted a message, which appeared to come from the singer herself, which announced that she wanted to update her fans about "the size of my vagina" which was "about 4 feet wide with razor sharp teeth."

Twitter and TwitPic are said to have got the current death hoax situation under control, with messages withdrawn and security holes patched, but not before reports of the deaths of other celebrities such as P. Diddy, Ellen Degeneres and Jeff Goldblum were posted on Twitter.

Dani AI

Generated

As noted, high-profile celebrity news reliably attracts opportunists who trade on surprise and emotion. The immediate spike in attention makes sensational claims and "exclusive" links effective hooks for credential theft, drive-by downloads and account takeovers. That pattern — rapid amplification followed by malicious links or hijacked posts — is the core risk to be aware of.

Practical verification steps for any sensational post: confirm the story through multiple reputable news outlets and the celebrity’s official channels before sharing; treat unsolicited links and shortened URLs as high risk and expand/inspect them first; prefer searching a known news site rather than clicking an unexpected link; and examine message provenance (sender domain, headers or platform metadata) for signs of spoofing or bulk-post behavior.

Account protection and recovery guidance: enforce unique, strong passwords stored in a password manager and enable two-factor authentication (app or hardware token preferred); routinely audit and revoke third-party app access and active sessions; if compromise is suspected, rotate credentials, revoke all sessions and app tokens, run malware scans on likely endpoints, then notify the platform and post a clear correction once control is restored. Preserve relevant timestamps and logs to accelerate platform takedown and restore trust.

Operator and admin controls that reduce impact: apply link-scanning at the gateway and web filter layer; rate-limit or flag rapid, identical posts linking to unknown domains; provide a simple reporting/takedown path for verified accounts; and rehearse an incident playbook so human moderators act quickly. The pattern highlighted by — attackers reusing major news hooks — remains relevant long after the headlines; making verification harder and recovery faster is the most reliable defense.

happygeek 2,411 Most Valuable Poster Team Colleague Featured Poster

I'm now waiting for the first 'RIP Johnny Depp' malware link scam to hit, it's surely only a matter of time :(

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.