This most recent attack technique appears as an arriving email but contains a crafted malicious link. The attack is camouflaged as a Facebook correspondence alerting the victim that a friend “commented on your photo”. Although new security procedures are being implemented to protect Facebook users, cybercriminals will continue to aggressively abuse this and other social networks.
The sender name is counterfeit and the email is NOT a Facebook address. When you run your cursor over the fake Facebook link it then becomes visible that it will redirect to a suspicious page; [***].org.ua/e107_files/cache/facebookredir.html, followed by an encoded script that direct users to another malicious page: P[**]o[**]e.com/wefretyutresrtydrtse/etf****izc.php.
Last week, Facebook announced their new Messaging system that will be launching in the next few months. Certainly it will give better control to users, and will possibly minimize some issues but we at McAfee Labs expect spammers and cybercriminals to attempt abuse as well. I’m a firm believer the most powerful tool is still common sense alongside some best practices: be an informed, safe and protected user. Always keep your security software up to date!
Tags: Cybercrime, facebook, identity protection, malware, McAfee Initiative to Fight Cybercrime, social networking, social networks, spam
Yet another phishing scheme, this time preying upon the brand of the fourth largest site in the world. As a digital native, it’s quite easy to identify the blatant attempts by these spammers, but a cold shiver crawls my spine when I think about an older user, or perhaps a little kid, unknowingly falling victim.
Thank you for highlighting this threat – I hope it reaches those who need it most.
Do you mind if I link to this article from my FB group, a startup community covering cybercrime issues?
The link is http://www.facebook.com/pages/Help-Stop-Cybercrime/109047252509250
Cheers,
Chris
Felix,
With all due respect, didn’t you know that Common Sense is DEAD?? People nowadays do not have/know any common sense, I state at the risk of grossly over generalizing. “They” either didn’t want to know, didn’t read it, or didn’t care about Common Sense, thus leading to its demise.
THANK you tho – I DID READ, and DO CARE.
These types of e-mails are very common among our clients. An I should say anti-virus solutions won’t help here.. The user must understand, that clicking anytime anywhere is dangerous and can cause lots of problems
Very informatite,McAffee is beginning to look like a leader in fighting the cyber bug world of deception and trickery.Being on a limited income and unable to work I would be hardpressed to come up with $$$ to pay for a new laptop or costly tech support if I became a victom of attack.Is there a way.
Thanks McAfee, with this information I’ll be more careful, especially on my children and my family.
are you familiar with this attack? What i mean…what does this attack do, how can i as a user identify that i was attacked by this “mail-virus”…its not me, who opens mails on this computer.
Submit your own comments / message for this post