When it comes to Facebook, security always seems to be a problem. This time, hackers have managed to steal passwords of 200 million users through phishing scam as reported by Reuters. Facebook spokesperson Barry Schnitt said the site was in the process of cleaning up damage from the attack and also blocking compromised accounts.
Looks like Koobface and Dancing girl, weren't enough to teach Security lessons to Facebook.
Targeted Facebook users were sent an email message that asked them to click over links to fake websites - www.151.im, www.121.im and www.123.im that had fake domains. On clicking on any of these sites, a Facebook-like login page would appear. Apparently, the phishing attack becomes success when user enters login credentials into that fake Facebook login page. Facebook in turn deleted all references to these domains.
According to Schnitt, Facebook's security team believes that hackers intended to attack large number of accounts which later would be used for spamming about pharmaceutical products.
Debbie Frost, Director, Global Communications and Public Affairs at Facebook, pointed out that "the issue is not widespread and only impacting a small fraction of a percent of users. We re not releasing specific numbers because we don t want the bad guys to know what we ve detected (they'd find that information (they'd find that information useful and enable them to make their next attack more effective.)"
Facebook users are requested not to open any suspicious emails from unknown Facebook accounts asking you to visit any social networking site.
You guys should learn from me. I didn't provide same password used for Facebook as the e-mail used for signing-up.
That is first step. You should learn to change your password from time to time. If it's true that ppl can access Facebook accounts, make yours a little difficut for the bad guys.
Hi everyone -- my name is Debbie Frost and I am a spokesperson for Facebook. I saw this article and your comments and wanted to let you know that this issue is not widespread and only impacting a small fraction of a percent of users (so, NOT 200m as this headline states). We’re not releasing specific numbers because we don’t want the bad guys to know what we’ve detected (they'd find that information useful and enable them to make their next attack more effective.)
Hi Debbie,
I have only just read about all this as I have not been on facebook for that long. after reading this info regarding the scams I believe i must have been amongst those that were as i have received a few emails regarding the from various pharm/ prods etc thought they were not opened as i know i never visited these sort of sites
Thanks
Thats weird Because yesterday I logged on to face book and it put me right to my account. I did not even have to log in. Now I cant even log into my account.
The reuters article does not say that 200 million accounts where hacked, it says 200 million users were attacked. There are only 200 million active facebook users, your article makes it sound like every single one of them went to this phishing site and put their password in. That is extremely unlikely.
I got hacked on Saturday.who ever it was robbed all my facebook poker chips which i was selling online.
Approximately 500 pounds worth.
This has been reported to facebook but nothin has happened.
What happens now?
why if one is trying to log into face book the access denied,at the begining it was very much easy to access facebook unlike what is happening today let mne know because i can only able to access facebook only mobile (CELLPHONE) i just request a clarity
thanks in advance
kind regards
LUKANI MASHELE