Adult sites trick users into Liking Facebook posts using a clickjack Trojan | Malwarebytes

As age-verification requirements for adult websites expand globally, cybercriminals are exploiting the shift by luring users to malware-laden sites, often hosted on blogspot[.]com and promoted via Facebook. Many promise explicit, AI-generated celebrity images but conceal a Trojan delivery mechanism. Visitors may be prompted to download a seemingly harmless SVG image file, which can contain obfuscated JavaScript designed to fetch malicious code. In this campaign, the malware—detected as Trojan.JS.Likejack—secretly “likes” Facebook posts promoting the malicious sites, boosting their visibility. Researchers warn that this tactic capitalizes on both regulatory changes and user trust in benign file types, recommending VPN use to bypass unsafe sites and real-time protection to block associated domains.