Facebook users hit with new phishing attack

**Glaswegian** · 04-30-2009, 12:55 PM

Facebook users were hit with a phishing attack that tried to steal names and passwords from users of the popular social network.

In the attack, people are sent phoney email messages, appearing to come from Facebook, that try to send them to a malicious website, Fbaction.net, which looks like a Facebook log-in page.

The Fbaction.net website was still live Wednesday afternoon, but as of Thursday, Facebook is now blocking the website after working to blacklist the domain. "We are aware of this phishing domain and have already begun to take action," the company had said on Wednesday.

"Our user operations team has blocked the domain from being shared on Facebook and is removing the content retroactively from any messages. They will also be resetting passwords of senders to remove access from an attacker. We're also reaching out to the ISPs to get information and will attempt to build a civil and/or criminal case against the owners."

http://www.techworld.com/security/ne...&NewsID=115179

04-30-2009, 12:55 PM	#1 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,503 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Facebook users hit with new phishing attack Facebook users were hit with a phishing attack that tried to steal names and passwords from users of the popular social network. In the attack, people are sent phoney email messages, appearing to come from Facebook, that try to send them to a malicious website, Fbaction.net, which looks like a Facebook log-in page. The Fbaction.net website was still live Wednesday afternoon, but as of Thursday, Facebook is now blocking the website after working to blacklist the domain. "We are aware of this phishing domain and have already begun to take action," the company had said on Wednesday. "Our user operations team has blocked the domain from being shared on Facebook and is removing the content retroactively from any messages. They will also be resetting passwords of senders to remove access from an attacker. We're also reaching out to the ISPs to get information and will attempt to build a civil and/or criminal case against the owners." http://www.techworld.com/security/ne...&NewsID=115179 __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner