April 29th, 2009
Identity thieves take aim at Facebook users
Identity thieves are currently launching a massive attack on Facebook, using fake log-in pages to hijack usernames and passwords.
The attackers are using Facebook’s mail system to send a one-line message luring users to “fbaction.net,” a site that clones the social networking site’s log-in screen.
Facebook is now blocking users from accessing the phishing site within its network but, at 4:00 PM Eastern, the Web site was still live.
Earlier today, there was chatter on Twitter about attackers using Facebook’s instant messaging feature to scam users into sending money internationally.
Ryan Naraine is a journalist and security evangelist at Kaspersky Lab. He manages Threatpost.com, a security news portal. Here is Ryan's full profile and disclosure of his industry affiliations.
For daily updates on Ryan's activities, follow him on Twitter.
Subscribe to Zero Day via Email alerts or RSS.
