A new wave of phishing and spamming attacks is hitting Facebook users as scammers attempt to get hold of their passwords, the social networking site acknowledged in a statement.
Similar phishing and spamming scams — in which messages supposedly from their friends lure victims to a malicious Web site — have been occurring with greaterintensity since the end of April.
The sites typically display a fake, though convincing-looking, Facebook page where users are prompted to input their login information. In addition, spam messages — supposedly from Facebook friends — display links to online pharmacies, according to Graham Cluley, senior technical consultant for Sophos.
Facebook is currently attempting to block the links to phishing sites. Site managers are also making efforts to scrub the links from users’ Wall posts and reset the passwords of affected individuals.
The attacks are thought to be related to the fbaction.net/fbstarter.com phishing campaign that struck the site a few weeks ago, Facebook said.
“We are generally seeing more and more spamming taking place on socialnetworks — more than ever before,” Sophos’ Cluley told TechNewsWorld, “so it’s becoming a more common problem.”
Why Is Your Friend Acting So Strange?
Sophos has been tracking attacks on online social networks and found thatone-third of users reported being spammed through social networks. One in five said they had received phishing attempts on social networks, andabout one-third said they had been sent malware on a social networkingsite, according to Cluley.
To protect themselves from being duped by one or more of thesescams, Facebook users need to be on guard. One thing they can do islook closely at messages they receive from apparent friends onFacebook to determine whether they’re the normal kinds of messagse their friendswould send. For instance, suggested Cluley, is a particular friend in the habit of sending a link in a message simply reading, “Check this out”?
Social network users should be suspicious of unusual links andexamine where they go. For example, if a link should claim to be for a YouTubevideo, be sure to look at the URL the link displays to make sure ofthe location, he said.
“Whenever users enter information on their Facebook page, they shouldmake sure they are really on that page. It can look like Facebook butreally be a lookalike site to grab your personal information,” Cluleywarned.
Stay Secure
Deploying the latest security patches on one’s computer is also essential.In the event a user falls victim to a phishing message, having thelatest security patches can guard against malware on a maliciousWeb site. Otherwise, the result can be nasty downloads installing malicious software forID theft or other purposes, said Cluley.
“The Facebook staff is actively trying to block these phishing andspam attempts when they see them. They are removing the messages andissuing warnings to people that they are going to a third-party site,” hesaid.
Another thing users can do is run antiphishing software on theircomputers. Some of these tools are built into Web browsers, and they may beable to warn users about fake sites built to install malware that would allowhackers to take over the computer.
Passwords Matter
About one-third of all computer users use the same password for all of their various log-ins, and a phisher who tricks a user into logging on to aphony Web site, will have that universal user password — and possibly an email address as well. It’s like losing your wallet, according to Cluley.
For this reason, Facebook recommends that anyone affected by this phishing attack reset their passwords — not only for their Facebook profiles, but also for other online accounts such as email services.
In addition, users should be especially vigilant about the names of links they click on. It is not always easy to spot a phony landing page — the scammers choosedifferent names each time.
“Over the last few days we’ve seen a URL with “www” and then a numberdot M. There are lots of different disguises the hackers can use,” said Cluley.
Loading ...
Now you’ll know who in your "friends" is actually intelligent enough to tell between a fake site and a real one.