Massive Instagram ‘click farm’ found following data breach Instagram dark mode
Fake accounts on social media platforms are often used to commit fraud as well as to spread disinformation and fake news which is why the recent discovery of a massive Instagram ‘click farm’ is so concerning.
For those unfamiliar, click farms are operations where low-paid workers, usually in developing countries without strict data regulations, are paid to click on links and interact with users online either to earn income through advertising or to inflate a person’s following on a social network.
The vpnMentor research team, led by Noam Rotem and Ran Lucar, came across this new click farm after uncovering a command and control (C&C) server that contained data for tens of thousands of Instagram profiles including usernames and passwords, proxy IP addresses, email addresses connected to the accounts, SMS verification codes and phone numbers used in the operation.
As all of this data was stored on a single server, the click farm’s operations were completely centralized and controlled by a single entity. This allowed anyone working at the farm to log into an account from anywhere in the world and start interacting with real Instagram users online.
Instagram click farm
Based on its initial investigation, vpnMentor believes that the click farm is being operated by a third party which is possibly based in Kazakhstan or Armenia. However, the research team also reached out to Instagram’s parent company Facebook upon discovering the operation.
The fake Instagram accounts were used to publish posts, view others’ posts, follow, react and engage with other profiles on the platform. In order to get around being flagged as spam, the operator of the click farm matched each fake profile with an IP address in a country that corresponded with its ‘persona’.
At the same time though, thousands of local SIM cards were also needed to receive verification codes when joining Instagram. In addition to many of the server’s real IP addresses being located in Kazakhstan and Armenia, so too were the mobile phone operators used to receive the SMS verification messages.
We could possibly find out more about the operator of the click farm and their intentions once Facebook conducts its own investigation into the matter.
Via vpnMentor
Fake accounts on social media platforms are often used to commit fraud as well as to spread disinformation and fake news which is why the recent discovery of a massive Instagram ‘click farm’ is so concerning. For those unfamiliar, click farms are operations where low-paid workers, usually in developing countries…
Recent Posts
- Hands-on with the Surface Laptop on Arm
- 10 Best Deals From the Discover Samsung Sale: TVs, Smartphones, Headphones
- Apple’s new iPhone and iPad update fixes a bug that resurfaced deleted nudes
- Microsoft announces new Surface lineup with Qualcomm Snapdragon X chips
- Microsoft’s new Copilot+ Surface Pro has an OLED screen and a redesigned keyboard
Archives
- May 2024
- April 2024
- March 2024
- February 2024
- January 2024
- December 2023
- November 2023
- October 2023
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- November 2022
- October 2022
- September 2022
- August 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- December 2021
- November 2021
- October 2021
- September 2021
- August 2021
- July 2021
- June 2021
- May 2021
- April 2021
- March 2021
- February 2021
- January 2021
- December 2020
- November 2020
- October 2020
- September 2020
- August 2020
- July 2020
- June 2020
- May 2020
- April 2020
- March 2020
- February 2020
- January 2020
- December 2019
- November 2019
- December 2011