A widespread Facebook phishing campaign stating, "I can't believe he is gone. I'm gonna miss him so much," leads unsuspecting users to a website that steals your Facebook credentials. If you clicked on the link, you might have fallen victim to a phishing scam that tries to steal your Facebook login and password.
This particular phishing scam has been going on for about a year, and it is very hard for Facebook to stop it because the hackers keep changing the websites and links they use. The scam works by hacking your friends' accounts and using them to post phishing messages, which makes them look more trustworthy and convincing.
The scam also targets different devices differently. If you click on the link from your mobile phone, you will be taken to a fake news site that asks you to enter your Facebook credentials to watch the video. If you fall for it, the hackers will steal them and redirect you to Google.
If you click the link from your desktop computer, you will be taken to different sites promoting VPN apps, browser extensions, or other scams.
Key takeaways:
- Enable two-factor authentication (2FA) on your Facebook account. So your account does not become a source of this and other types of attacks on your friends. You can enable 2FA on Facebook by going to Settings > Security and Login > Two-Factor Authentication and following the instructions. For the best security, use an authentication app rather than SMS texts, as your phone number can be stolen in SIM swapping attacks.
- Now that you know, be alert for any posts or messages with the tagline "I can't believe he is gone."
Stay safe, and don't trust everything you see on social media.
#ALTACyber
------------------------------
Genady Vishnevetsky
Chief Info Security Officer
Stewart Title Guaranty Company
Houston TX
------------------------------