Facebook Like virus?

Question

Facebook

Today, on one of the "sponsored projects" I discovered a very unpleasant thing. I can't say with 100% certainty where it came from. Apparently, this attack appeared relatively recently and I could not find traditional medicine on the Internet.

The action of the "virus":
Visually - it replaces your like button from facebook with someone else's. That is, you the user enters the page, presses like, but in the end, this “like” goes not to you, but to another resource.
Technically, facebook like information is pulled from meta tags. You can check your page the way facebook sees it at this address:
https://developers.facebook.com/tools/debug/og/echo?q=youdomain.ru
The virus replaces <link rel='canonical' href= 'yousite.ru'> to the address he needs.
How to fight?
If you use cms, carefully review all the files that affect the formation of the header block of the page, as well as the route system (forming CNC links). If you don't use it, try specifying rel='canonical' manually - it won't cure it, but will cancel the effect of the "beast".
In conclusion, the virus I found settled on the wordpress platform, and more specifically in the seo plugin. He cured it by rewriting the formation of the header information (namely, the canonical output).
Finally, one more useful thing from facebook ( https://developers.facebook.com/tools/debug )

Actually the question. Has anyone encountered these issues before and how did you deal with them?

Answer 1

just in case:
canonical - points to a page with more complete content than on the actual
facebook page takes data from the open graph (meta og), if there is none, then selects “optional”
they didn’t try to take away likes from you, they tried to glue you