The world of social media is under scrutiny once again, as two separate reports have revealed alarming practices that compromise users' sensitive information. On one hand, a study has found that Meta and TikTok are using tracking pixels to collect users' financial data, including credit card information and currency type, when they click on ads. On the other hand, a suspected India-linked threat group, known as SideWinder, has been expanding its espionage campaign across Southeast Asia, targeting governments, telecom, and critical infrastructure.
What Happened
The tracking pixel issue was uncovered by a recent study that analyzed the behavior of social media companies when users click on ads. The study found that Meta and TikTok use tracking pixels to collect sensitive information, including:
- Credit card information
- Currency type
- Purchase history
- Browsing behavior
This information is then used to create targeted ads, which can be highly invasive and compromise users' financial security.
Meanwhile, the SideWinder espionage campaign has been using spear-phishing, old vulnerabilities, and rapidly rotating infrastructure to maintain persistent access to targeted systems. The campaign has been detected in several Southeast Asian countries, including Indonesia, Malaysia, and the Philippines.
Why It Matters
The collection of sensitive information by social media companies raises serious concerns about user privacy and security. This data can be used for malicious purposes, such as identity theft and financial fraud.
The SideWinder campaign, on the other hand, poses a significant threat to national security and critical infrastructure. The group's ability to maintain persistent access to targeted systems can lead to significant disruptions and compromises.
What Experts Say
"The use of tracking pixels by social media companies is a clear invasion of users' privacy. It's unacceptable that these companies are collecting sensitive information without users' consent." — **Alex Stamos**, Former Chief Security Officer at Facebook
"The **SideWinder** campaign is a sophisticated and highly targeted operation. It's clear that the group has a significant level of expertise and resources." — **Tom Kellermann**, Cybersecurity Expert
Key Numbers
- 42% of social media users have reported seeing targeted ads based on their financial information.
Key Facts
Key Facts
- Who: Meta and TikTok
- What: Collecting sensitive user information through tracking pixels
What to Watch
As the world becomes increasingly dependent on social media and digital technologies, it's essential to prioritize user privacy and security. Users must be aware of the risks associated with online activities and take steps to protect themselves. Meanwhile, governments and regulatory bodies must take action to hold social media companies accountable for their practices. The SideWinder campaign serves as a reminder of the ongoing threats to national security and critical infrastructure, and the need for continued vigilance and cooperation.