CERT Polska warns against hackers’ latest moves. Cybercriminals are pretty good at spoofing Facebook usernames, passwords, and other data that they can use for nefarious purposes. How to recognize fraud?
The CSIRT (Computer Security Incident Response Team) at the National Research Institute NASK constantly monitors new threats on the Polish Internet. This time, experts managed to discover as many as two new scams. One of them is extremely tricky and concerns the site that almost all of us use - Facebook.
Hackers are attacking Facebook accounts again - how to detect fraud?
The NASK team points to an “extremely cunning” hacking campaign targeting Facebook users. Launching the network on the victim begins with sending a fake email. In it, Internet users are informed that they have violated the rules of the social network. They can appeal this decision if they follow the link in the email.
The hyperlink takes us to a page in the facebook.com domain, which is an actual subpage of the site owned by Mark Zuckerberg. There, however, we read another message that you must click on another link below.
It is the second hyperlink that directs us to an already fake page. It looks like a login screen, but it’s actually designed to phish from us, including the password to access the website. This is how hackers take over Facebook accounts.
They can be used to further phish attacks on our friends, as well as hijack our email and even bank accounts.
New “PGNiG” scam
The second NASK warning concerns the “PGNiG” scam method, which has been known for some time. Another wave of fake text messages has just begun. Cybercriminals argue with reports about the client’s debt and turning off the gas if he does not pay the due commission.
The SMS message contains a fake link, according to which, according to assurances, it will be necessary to pay the overdue invoice. However, if we provide all the bank account details in a fake payment panel, our account will most likely have all the funds stolen.
Source: Wprost
