New Facebook phishing attack uses 'fake' Yahoo Philippines email

A "bogus-looking" Yahoo Philippines email may be used in a new wave of phishing attacks targeting Facebook users, according to a report on Forbes.com.

Forbes said Facebook has discovered a "single isolated campaign" using compromised email accounts to gain information taken from Friend Lists.

"(We have) discovered a single isolated campaign that was using compromised email accounts to gain information scraped from Friend Lists due to a temporary misconfiguration on our site," Forbes quoted Facebook as saying in a statement released to it.

It said the new attack poses as users' friends and family to trick them into clicking on potentially dangerous links.

Forbes said Facebook has since enhanced its scraping protectins to thwart similar tricks.

"To be clear, there was neither a mass compromise of Facebook accounts nor any leak of private information," it quoted Facebook as saying.

The Forbes report said the new spear-phishing campaign makes the email appear to come from a close friend or family member, and address the victim by name in the subject line or body of the message.

It also includes a link to a website controlled by the spammers.

"They exploit the fact that you’re more likely to click on strange links if they’re sent by a trusted friend," Forbes said.

Forbes.com staff David Ewalt, who wrote the report, said he received two such spear-phishing messages last week at his personal email address he registered with his Facebook account.

"In both cases, the sender appeared to be someone I interact with on Facebook, and the subject line was personalized ('for David'). But when I checked the email’s header fields, I saw that while my friend’s name was in the 'From:' field, the originating address wasn’t their usual account; instead, it was a bogus-looking Yahoo! Philippines email," he said.

Forbes also quoted Johannes Ullrich, chief research officer for the SANS Institute, as saying the number of spam attacks using data collected from social networks has ramped up in recent weeks.

“Automating these attacks is easier then before ... Having millions of users connected to the same [programming interface] creates a rather easy opportunity to harvest this information. The process is also aided by Facebook’s confusing privacy settings. They have improved, but still many users don’t realize what they share and who they share with,” Ullrich said.

Facebook recommended that users take the following steps:

Review security settings and consider enabling login notifications. Don’t click on strange links, even if they’re from friends, and notify the person if you see something suspicious. Don’t accept on friend requests from unknown parties. Report scams so they can be taken down. Don’t download apps you are not certain about. When accessing Facebook from places like hotels and airports, text 'otp' to 32665 to receive a one-time password to your account.

— TJD, GMA News

Loading...

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • China says U.S. actions in S.China Sea "irresponsible, dangerous"
    China says U.S. actions in S.China Sea "irresponsible, dangerous"

    By Sui-Lee Wee BEIJING (Reuters) - China said on Friday it was "strongly dissatisfied" after a U.S. military plane flew over part of the South China Sea near where China is building artificial islands, and called on the United States to stop such action or risk causing an accident. The Chinese navy issued eight warnings to the U.S. P8-A Poseidon, the U.S. military's most advanced surveillance aircraft, when it conducted the overflights on Wednesday, according to CNN, which had a team on board …

  • 2015 Hyundai Lateral Drift goes to Philippine Arena
    2015 Hyundai Lateral Drift goes to Philippine Arena

    The smell of burnt rubber and screeching tires are some of the highlights that will be seen at the most adrenaline-pumped drifting event of the year—the 2015 Hyundai Lateral Drift Championship series.   Held at the Philippine Arena in Bocaue, Bulacan, the event will be the biggest venue in the drifting competition. This is the […] The post 2015 Hyundai Lateral Drift goes to Philippine Arena appeared first on Carmudi Philippines. …

  • The Richest Senators In The Philippines
    The Richest Senators In The Philippines

    The 2014 Statement of Assets, Liabilities, and Net Worth for politicians and public servants are now available for anyone to … The post The Richest Senators In The Philippines appeared first on iMoney.ph. …

  • PHILIPPINES PRESS-AirAsia Philippines seeks $500 mln valuation for IPO - Inquirer

    The Philippine unit of Malaysian budget carrier AirAsia Berhad is seeking a valuation of at least $500 million for its initial public offering set within the next two years, the Philippine Daily Inquirer ... …

  • Consultant, facing joblessness, claims P5.9-M lotto pot
    Consultant, facing joblessness, claims P5.9-M lotto pot

    A 39-year-old information technology consultant, whose job contract will expire this month, has claimed his share of the 6/45 Mega Lotto’s P17.8-million jackpot in its May 13 draw, the Philippine Charity Sweepstakes Office (PCSO) announced yesterday. “I could not sleep for the past several days, thinking about where I could get the money to pay my children’s tuition,” the winner told PCSO general manager Jose Ferdinand Rojas II when he received a check for P5.9 million at the PCSO’s central …

  • Cager’s daughter: I will never drive again
    Cager’s daughter: I will never drive again

    Kim Asaytono vowed never to get behind the wheel again after she hit 14 people on Tuesday night and killed one of them. Even if she gets out of jail one day, the 22-year-old daughter of former Philippine Basketball Association player Nelson Asaytono said she no longer wants to drive. Maybe, I will still ride a car but I will never drive again,” she told The STAR in an interview in her jail cell at the Manila Police District headquarters. …

  • Disaster center to rise in Clark
    Disaster center to rise in Clark

    The private sector is set to build a disaster operations center near Clark international airport in Pampanga to strengthen the country’s preparedness against natural calamities. In his closing remarks during a two-day Earthquake Resilience Conference, businessman Manuel V. Pangilinan said yesterday the Philippine Disaster Recovery Foundation (PDRF) would build the center that would serve as base for immediate response to a disaster. Pangilinan, co-chair of the PDRF, said the disaster …

  • China shoos away US plane in disputed sea
    China shoos away US plane in disputed sea

    The Chinese navy warned a US surveillance plane flying over artificial islands that Beijing is creating in the disputed South China Sea to leave the area eight times, according to CNN, which was on board the flight on Wednesday. The P8-A Poseidon, the US military’s most advanced surveillance aircraft, flew at 4,500 meters at its lowest point, CNN said. The incident, along with recent Chinese warnings to Philippine military aircraft to leave areas around the Spratly archipelago in the South …

POLL

Should Aquino be held accountable over the Mamasapano operations?

Loading...
Poll Choice Options