Online Reviews Expose Users to Phishing Risks

Recent research indicates that online reviews, particularly on platforms like Yelp, can be exploited by cybercriminals to infer users' social connections. An algorithm developed by researchers from the University of Texas at Austin can reconstruct over 60% of real-world friendships based solely on review length patterns and behavior. This method enables spear-phishing attacks, where attackers impersonate trusted contacts to deceive victims. In simulated phishing campaigns, the potential returns on investment for attackers could reach up to 1,098% as the scale of impersonation attempts increases. Although the study highlights the risks, it does not confirm that these tactics are currently being used by criminals. The research emphasizes the need for privacy measures, such as adding statistical noise to review data, to mitigate these risks. The findings were published in the journal Information Systems Research.

Key Points: • Online reviews can reveal social connections, making users vulnerable to phishing. • An algorithm can reconstruct over 60% of friendships based on review behavior. • Spear-phishing campaigns using inferred connections can yield high returns for attackers.