Phishers take aim at Facebook page owners – Help Net Security

Phishers are looking to trick owners of Facebook pages with fake notices from the social network (i.e., Meta, the company behind Facebook, Instagram and WhatsApp), in an attempt to get them to part with sensitive information. The method they are using to harvest information is quite clever: they create a lead generation form via the Meta Ads Manager and include the link to it in the phishing email. Such a link makes it less likely that email security solutions will flag the email as potentially malicious, and can also give a false sense of security to the potential targets, as the email ostensibly came from Facebook and contains a link to a page hosted on Facebook. “Our researchers have been consistently tracking phishing emails that come from legitimate sources,” says Jeremy Fuchs, a cybersecurity researcher at Avanan. Hackers often leverage sites that appear on email security services’ Allow lists – and Facebook is one of those. “So a link from Facebook would appear to be legitimate and not scanned for further malicious content,” he explained. The phishing emails Avanan has spotted two types of phishing emails with links to a lead generation form on Facebook: A (fake) notification saying that…
Read More