Accessibility links
  • Skip to main content
News Icon NEWS FILTER
All News Scams & Phishing Security Education Videos Mobile Security Your Security Education Identity Theft Corporate Security
Search Icon SEARCH
 

Email Icon SUBSCRIBE TO WEEKLY NEWSLETTER
Don’t Fall For It! Phishing Email Attack Warns Your Facebook Page Will Be Suspended
Facebook   X   LinkedIn   Email

Don’t Fall For It! Phishing Email Attack Warns Your Facebook Page Will Be Suspended

November 25, 2023

If an email pops-up saying your Facebook account will be suspended, pay close attention. A new scam by cyber-crooks wants to steal your login information and other PII using their clever lure. With nearly 3 billion active Facebook (FB) users, this unique approach to data theft has more than enough prospective victims, so read on to make sure you won’t be one of them.

The bogus email claims other Facebook users reported you for making posts that violate Facebook’s content policy. As such, the email from “The Facebook Team” warns your account will be disabled and your page removed. Some refer to it as being in “Facebook Jail.”

But no worries about this accusation because the email provides a series of links that finally bring you to a website where you can fill out an appeal form. In reality, the form is linked to a credential-phishing site. Just enter your plea, provide your FB login data, email address, and other sensitive PII. However, there’s much more to it than it appears.

Know that the information you just provided goes directly to the remote attacker. Then, the attacker can login to your FB account, steal information from it and possibly leave you locked-out. Should a victim reuse their FB password and FB email address for other accounts and apps, the attacker now has rights to them all. That’s your reminder to never reuse login credentials. Each website for which you have an account should have its own login and password combination. Don’t forget to use strong passwords for each of them.

Clues to this Credential Phishing Attack

Knowing what the clues are to this “FB” email attack can keep you from becoming the next victim, so look closely and stay safe.

  • The email content creates a sense of urgency, hoping to get a rushed response. Never let urgency, scare tactics or threats make you act quickly.
  • Although the email looks like it’s from FB, a look at the sender’s address shows it’s not.
  • Sending a response to the email finds it doesn’t go to FB, but rather to an unrelated Gmail address.
  • As you should with all other emails and chat messages too, don’t click on any links in their messages

The safest response to an email about any account issue, urgent or not, is to go directly to the legitimate website and login. There you’ll find out if the email is for real, and the risk of clicking on a potentially corrupt email link is put to rest.


There Is Plenty Of Phishing On Online Apps--Don't Get Hooked

Mobile Security

There Is Plenty Of Phishing On Online Apps--Don't Get Hooked

A recent documentary aired on subscription streaming service, Netflix, that highlighted how difficult it is to detect when someone is trying to take advantage of human nature and kindness. You may have seen it. It has been discussed on various media and it may be difficult to watch. But it is yet another example of how criminals use social engineering and trust to get what they want. One interviewee tells the story of how she met a guy that matched and swept her off her feet and swept her bank account clean. READ FULL STORY

How To Create A Strong And Unique  Password For Every Account

Education

How To Create A Strong And Unique Password For Every Account

Most of us know by now not to use the same passwords for different accounts; yet some of us still do. But users who continue to use passwords they know have been exposed in a hack are truly flirting with danger. In a recent study, Google found 1.5% of passwords are still being used despite those users knowing they’ve been compromised. A security researcher discovered more than 22 million unique passwords and over 770 million email addresses were made public on a popular hacker forum earlier this year. READ FULL STORY

Credential Stuffers Compromise More Than 100K Accounts

Your Security

Credential Stuffers Compromise More Than 100K Accounts

Credential stuffing is a cyber-attack in which stolen user credentials and corresponding passwords are used with brute force to make automated login requests. The stolen user credentials are typically from data breaches that could have happened recently, but also may have occurred long ago. These types of attacks are particularly effective when the same username and password combination is used across multiple websites or services. New York’s attorney general announced that an investigation into credential stuffing had uncovered 1.1 million compromised customer accounts linked to 17 well-known companies. READ FULL STORY

Facebook, Instagram Shopping Scams Run Wild And Rake In Millions

Scams & Phishing

Facebook, Instagram Shopping Scams Run Wild And Rake In Millions

Data recently released by the Federal Trade Commission (FTC) shows that the number of complaints about social media shopping scams more than tripled over the last year. Consumers reported losing more than $117 million to this type of scam in just the first six months of 2020 compared to $134 million for all of 2019, according to the FTC’s latest Consumer Protection Data Spotlight. The social media sites overwhelmingly involved in these scams are Facebook and Instagram, with consumer scam reports totaling 94% of all rip-offs involving a specific platform. READ FULL STORY

Social Media Brings Out The Worst Scammers

Scams & Phishing

Social Media Brings Out The Worst Scammers

Social media attacks are a favorite of those pesky cybercriminals. One might wonder why. Well, it’s because it’s easy pickin's going for those accounts. Researchers at Arkose Labs found that of 1.2 billion social media interactions, 53% of the logins were fraudulent and 25% of new accounts were phony. Millions of people use one form of social media or another, whether it’s Facebook, Instagram, Snapchat, LinkedIn, or something else. That leaves a barrel full of phish used for targets for hackers and scammers. READ FULL STORY








Close
Fraud News & Alerts!

Keep up with the latest cyber security news through our weekly Fraud News & Alerts updates. Each week you will receive an email containing the latest cyber security news, tips and breach notifications.



You're all set!

You will receive your first official security update email within the next week.

A welcome email has also just been sent to you. If you do not receive this email within the next few minutes, please check your Junk box or spam filter to confirm our emails are not being blocked.


 
Help  
Enter any word or words you like.        

The email newsletter will arrive from news@stickleyonsecurity.com


Loading
Please wait...