While scouting the Web for the latest Facebook security issues, I’ve stumbled upon a new Facebook login page, as shown in the below pictures. In fact, it is not surprising that the fake Facebook site still exist as cybercriminals are using it as a phishing attack to steal the users’ login password.

Picture 1:

Normally I won’t show the actual phishing site’s URL name, but hey, it’s far too important to login to your Facebook account by using the real URL, i.e. https://www.facebook.com, not just the similar design as appeared on your browser.

Picture 2:

If you try going to the phishing site mentioned in the above, your Facebook login credentials will be sent to the remote server, i.e. logs.php via HTTP POST, as shown in the below picture. After all, your login details will be saved to their log file for them to use.

However, after you login this fake Facebook account, it will redirect you to a user page of YouTube account called xToxicEclipse’s Channel, which seems to be legitimate.

In addition, the domain name of this fake Facebook page was registered in a Web hosting company in Indonesia called Dijaminmurah.com on September 11 this year…

So be careful if you come across any URL link to this fake Facebook site on your profile’s Wall.

There is a new wave of phishing scams that targeted Facebook users for the past few days and probably you’ve heard of this. It started with the phishing sites that registered under .at (Austria) and later the .be (Belgium) domain names. For this purpose, I’ve compiled a list of these phishing sites, and whenever you came across it in your Facebook email messages, do not click on the URL links.

A common trick is that all of these phishing scams start from a Facebook message with an aim to trick Facebook users to click on the URL links. In order to lure users to click on these links, all the subject line of the emails is either “Look at This”, “Hello” or “Check” following by one of the .at or .be domain names listed below.

This wave of phishing scams garnered much attention in Facebook since there are users who fail for the scam, lost their Facebook login details as well as the new cycle continues as the cybercriminals started using their accounts to send emails to their friends.

Picture: Phishing site; noticed that there is no Facebook logo in the header of the site

WARNING: DO NOT click links to the following sites:

Areps.at
Bests.at
Brunga.at
Kirgo.at
Nutpick.at

Atomclub.be
Bestspace.be
Bitclan.be
Databus.be
Dynasale.be
Goldbase.be
Greenbuddy.be
Indigoline.be
Linkteria.be
Mymarket.be
Orangefan.be
Picoband.be
Pinkamigo.be
Redbuddy.be
Redfriend.be
Silvertag.be
Sweeter.be
Vispace.be
Whiteflash.be
Whitemart.be

Nevertheless, the good news is that Facebook has taken action and blocked all of the outgoing links to the aforementioned phishing sites, while Firefox browser has also blocked its users from accessing to the above sites as well.

A friend asked me before what one should act when she just join Facebook? My simple answer is that don’t simply add fake Facebook friend to your inner circle as well as join the fake group. Of course, there are many fake profiles that one can’t easily differentiated in Facebook, as I also wrote a post entitled, “Profiting from fake profiles” last month.

But for the fake group, I think I found the answer which I hope I won’t make a mistake. My simple conclusion for a Facebook group is: Good admin is good group. It’s a rare exception where good Facebook group don’t accompany good admin(s), or it’s even a rare exception where a Facebook group don’t have any admin.

Last week, I found that a Facebook group which have no admins. There is a statement appeared on the Group, i.e. There are no admins left in this group! Beware of this kind of groups, that’s because one good admin will not simply build a Facebook group and then leave the group, before she has properly introduced another Facebook member to take over the admin jobs.

Somebody has created ten Facebook fake profiles and is trying to make a profit from selling these fake profiles on eBay. These profiles are said to have a minimum 200 friends each. In January this year, CNet reported that 43% of Facebook messages are spam, now I wonder how many of the Facebook profiles are fake?

via [AdRANTs]

Update: I checked out the eBay link, it showed “This listing (260249755056) has been removed or is no longer available.“