Phishers hit Facebook with scam messages

The attack tries to steal Facebook usernames and passwords

Facebook users were hit Wednesday with a phishing attack that tried to steal names and passwords from users of the popular social network.

In the attack, people are sent phoney e-mail messages, appearing to come from Facebook, that try to send them to a malicious Web site, Fbaction.net, which looks like a Facebook log-in page.

The Fbaction.net Web site was live Wednesday afternoon, but Facebook is working to blacklist the domain and hoping to have the site shut down, according to a Facebook spokesman.

"We are aware of this phishing domain and have already begun to take action," the company said in a statement.

"Our user operations team has blocked the domain from being shared on Facebook and is removing the content retroactively from any messages. They will also be resetting passwords of senders to remove access from an attacker. We're also reaching out to the ISPs to get information and will attempt to build a civil and/or criminal case against the owners."

Victims of the attack are being sent a message with the Subject line "Hello," that appears to come from a friend, according to TechCrunch, which first reported the attack. The message simply invites the victim to "Visit http://www.facebook.com/l/4253f;http://fbaction.net/".

That URL redirects the victim to the Fbaction.net Web site.

Victims of the phishing attack are given several warnings. The first comes when they click on the link in the original message and are redirected away from Facebook's Web site.

Another warning pops up after users enter their name and password on the phishing site and are redirected back to Facebook. This second warning advises victims to change their password.

The Fbaction.net Web site does not attack the victim's computer, but only tries to collect log-in information.

Criminals like to have this kind of information because computer users often have the same usernames and passwords on several Web sites. Hacked Facebook accounts are also useful for launching future attacks, security experts say.

Join the PC World newsletter!

Error: Please check your email address.

Tags social networkingscamsphishingsocial engineeringFacebook

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Robert McMillan

IDG News Service
Show Comments

Essentials

Lexar® JumpDrive® S57 USB 3.0 flash drive

Learn more >

Microsoft L5V-00027 Sculpt Ergonomic Keyboard Desktop

Learn more >

Mobile

Lexar® JumpDrive® S45 USB 3.0 flash drive 

Learn more >

Exec

Lexar® JumpDrive® C20c USB Type-C flash drive 

Learn more >

Audio-Technica ATH-ANC70 Noise Cancelling Headphones

Learn more >

HD Pan/Tilt Wi-Fi Camera with Night Vision NC450

Learn more >

Lexar® Professional 1800x microSDHC™/microSDXC™ UHS-II cards 

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest News Articles

Resources

GGG Evaluation Team

Michael Hargreaves

Windows 10 for Business / Dell XPS

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?