Homepage This page's url is: -crn- Rankings and Research Companies Channelcast Marketing Matters CRNtv Events WOTC Jobs HPE Zone Intel Partner Connect Digital Newsroom Dell Technologies World Newsroom Dell Technologies Newsroom HP Reinvent 2020 Newsroom IBM Newsroom The IoT Integrator Lenovo Newsroom NetApp Data Fabric Intel Tech Provider Zone

New Facebook Phishing Attack Found

Kaspersky Lab reports that the latest phishing scam tries to trick Facebook account holders into revealing their credit card numbers.

Security vendor Kaspersky Lab has reported a new phishing attack on Facebook that uses hijacked accounts to pose as the social network's security team and trick users into divulging credit card numbers.

The latest scam is unique because it doesn't just try to get Facebook users to click on a link to a malicious Web site, David Jacoby, a Kaspersky Lab security expert, reported Friday on the SecureList blog. The attackers also use the stolen information to log into the person's account and swap the profile picture with a Facebook logo and change the name to "Facebook Security."

Once the account is compromised, it is used to send out a message to all contacts, warning them that someone has reported a problem with their accounts and they will be turned off unless re-confirmed by the accountholder. Within the message is a link that takes victims to a Web sited dressed to look very similar to a Facebook page.

Once on the Web site, the cyber criminals ask for name, e-mail, password, Webmail system and password to e-mail. With this information, the attackers can compromise more Facebook accounts.

After victims have inputted their personal information, they are asked to provide credit card numbers for verification purposes and to purchase "Facebook credits," as needed. "These scams are just getting more popular and we really recommend not giving out personal information, especially not e-mail, password and credit card information over social medias," Jacoby said. The number of compromised accounts as a result of the scam was not known.

The new scam was reported about a week after more than 45,000 passwords were stolen from Facebook account holders by thieves using Ramnit, a variant of malware that has been found in the networks of corporations and financial institutions.

Israel-based Seculert found the stolen passwords on a remote server and notified the social network, the world's largest with more than 800 million registered users. Most of the private data was taken from Facebook account holders in the United Kingdom and France.

Back to Top



sponsored resources