Facebook Chat-based Phishing Attack Impersonates Facebook Security - wrighthatelve

A new phishing blast that's spreading through Facebook chat modifies hijacked accounts in order to impersonate the societal network's security team.

The attackers replace the visibility icon of compromised accounts with the Facebook logo and change their names to a variation of "Facebook Security measur" written with special Unicode characters, said Kaspersky Lab expert David Jacoby in a blog carry.

Facebook claims that changing the profile name terminate borrow to 24 hours and is subject to check. However, in Jacoby's tests the change occurred almost instantly and required only the password. This was besides confirmed by a victim whose profile name was limited inside 5 minutes of their account being compromised, he said.

After the victim's profile name and delineation mother changed, the attackers send dead a schmoose message to all of their contacts informing them that their accounts will be suspended unless they re-sustain their information.

The rogue messages appear to be signed past "The Facebook Team" and contain a join to a phishing page hosted on an external domain. The Net page mimics Facebook's design and asks for name, email, word, security doubt, country, birthing date and opposite information required to hijack the account.

Nonetheless, the attack doesn't stop there. According to Jacoby, a second form asks users for their charge card inside information and billing handle. This is somewhat unusual for Facebook phishing attacks, the majority of which target only multiethnic networking account information.

"These scams are just acquiring more popular and we really urge not giving out personal information, especially not email, password and credit card information over elite media," Jacoby said.