{"id":155355,"date":"2022-07-05T10:57:50","date_gmt":"2022-07-05T17:57:50","guid":{"rendered":"https:\/\/www.mcafee.com\/blogs\/?p=155355"},"modified":"2024-02-26T19:44:39","modified_gmt":"2024-02-27T03:44:39","slug":"over-10-million-facebook-users-hacked-in-ongoing-phishing-scam","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/over-10-million-facebook-users-hacked-in-ongoing-phishing-scam\/","title":{"rendered":"Over 10 Million Facebook Users Hacked in Ongoing Phishing Scam"},"content":{"rendered":"

In this digital age, communicating online and through our devices has become the norm. From sharing highlights of last night\u2019s game to sending cute animal videos back and forth, so much of our connectedness happens virtually. It\u2019s become so easy to chat with friends and loved ones through social media that we don\u2019t even have to think about it. We know who\u2019s on the other end of the screen, so why would we worry? We know our friends would never send us a malicious link that would steal our information, so why be cautious? Right?<\/span>\u00a0<\/span><\/p>\n

Not necessarily. Though a message or link may seem like it\u2019s coming from a friend, it\u2019s also possible that it was sent without their knowledge. There are many ways for hackers to scam people very believably. The latest Facebook Messenger hack is just one of many examples.<\/span>\u00a0<\/span><\/p>\n

Facebook Frenemies<\/span><\/b>\u00a0<\/span><\/h2>\n

According to <\/span>PIXM<\/span><\/a>, Facebook users have been conned for several months by a phishing scam that tricks them into handing over their account credentials. Users are shown a <\/span>fake login page<\/span><\/a> that copies Facebook\u2019s user interface, giving it the illusion of being real. When someone enters their credentials, their password and login combo is sent to the hacker who then sends out the same link and fake login to the user\u2019s friends through Facebook Messenger. Any user who clicks the link is asked to fill out their credentials, and the cycle repeats. PIXM estimates that over 10 million Facebook users have been duped by this scam since 2021.<\/span>\u00a0<\/span><\/p>\n

This hacker was able to utilize a technique to evade Facebook\u2019s security checks. When a user clicks on the link in the Messenger app, the browser redirects to a legitimate app deployment service, then redirects again to the actual phishing pages with advertisements and surveys that accrue revenue for the hacker. Using this legitimate service link prevents Facebook from blocking it without blocking other legitimate apps and links as well. Researchers say that even if Facebook managed to block one of these links, several others are created with new unique IDs every day to replace it.<\/span>\u00a0<\/span><\/p>\n

Phishing scams like these are harder to detect due to the realistic-looking interface on the login pages and that these malicious links are seemingly coming from friends and family. However, there are always key things to look out for when faced with phishing scams.<\/span>\u00a0<\/span><\/p>\n

Swim Away From These Phishes<\/span><\/b>\u00a0<\/span><\/h2>\n

Scams don\u2019t always come from overtly <\/span>sketchy emails<\/span><\/a> or text messages from strangers. Sometimes they can (unintentionally) come from people we know personally. This isn\u2019t to say that your friends online can\u2019t be trusted! However, it\u2019s important to always be cautious and keep an eye out for any odd behavior to stay on the safe side. Here are some key things to look out for when faced with potential malicious phishing scams:<\/span>\u00a0<\/span><\/p>\n