Fake Facebook emails warning!

Peter Dinham
Wednesday, 17 June 2009 08:49

Business IT - Security

Symantec has followed-up its recent report warning of an increasing trend to phishing attacks on Facebook, with a new warning for Facebook users to beware of fake emails attempting to steal login details to use their account for launching future phishing attacks on unsuspecting social networkers.

In its latest security bulletin, Symantec says phishing attacks on Facebook are again rife and it’s observed a method used by the phishers that directly targets a victim’s Facebook account.

According to Symantec, in this latest wave of phishing attacks, the attackers send a message to a victim’s Facebook ‘inbox’, as well as an email notification with the subject ‘Hello’ or ‘Hi’. 

The email appears to have come from the victim’s friend, and Symantec says the email includes text asking the user to visit a malicious and fake Facebook login page.

“From this page the attacker will then steal the user’s login credentials to launch future attacks,” says Suyog Sainkar in a security blog on the Symantec website.

Sainkar says that the email appears to have come from the victim's friend and includes text asking the user to visit an obscure URL link, and, “apparently, the link takes the user to a fake login page of the popular Facebook site.”

“Similar to the last week's “.im” and “.at” domains, this time the domains used are of the type “.be”. If you see a similar email or notification, do not click on any such .be, .im, or .at links, or enter in your Facebook username and password,” Sainkar warns.
CONTINUED page 2