Watch where you click - adult sites are hiding clickjacking malware in images, and all for Facebook likes

Shocked woman worker looking at laptop screen.

• Malicious SVG files are being weaponized to secretly like Facebook posts without user consent
• Attackers hide obfuscated JavaScript in images to bypass detection and execute dangerous social media hijacks
• Trojan.JS.Likejack silently boosts targeted Facebook posts by exploiting active sessions of unsuspecting victims

Security researchers have uncovered dozens of adult websites which are embedding malicious code inside Scalable Vector Graphics (.svg) files.