New Facebook Phishing Attack Found

Security vendor Kaspersky Lab has reported a new phishing attack on FB that uses hijacked accounts to pose as the social network’s security team & trick users into divulging credit card numbers.

The latest scam is unique because it doesn’t just try to get Facebook users to click on a link to a malicious Web site, The attackers also use the stolen information to log into the person’s account & swap the profile picture with a Facebook logo & change the name to “Facebook Security.”
Once the account is compromised, it is used to send out a message to all contacts, warning them that someone has reported a problem with their accounts and they will be turnedoff unless re-confirmed by the account holder. Within the message is a link that takes victims to a Web sited dressed to look very similar to a Facebook page.
Once on the Web site, the cyber criminals ask for name, e-mail, password, Webmail system and password to e-mail. With this information, the attackers can compromise more Facebook accounts.
After victims have inputted their personal information, they are asked to provide credit card numbers for verification purposes and to purchase “Facebook credits,” as needed. “These scams are just getting more popular and we really recommend not giving out personal information, especially not e-mail, password and credit card information over social medias,” Jacoby said. The number of compromised accounts as a result of the scam was not known.

The new scam was reported about a week after more than 45,000 passwords were stolen from Facebook account holders by thieves using Ramnit, a variant of malware that has been found in the networks of corporations and financial institutions.

> LIKE & SHARE US <
> join our Blog

Posted in: Facebook Security