New Facebook scam: "Enter details here to enable your account"
Posted by: Jon Ben-Mayor on 07/30/2014 12:31 PM
[
Comments
]
Facebook is always going to be the go to social media outlet for scammers due to the amount of users all congregated into one space. Combine that fact with a fake request from the rulers of that space and you have a recipe for the perfect scam.
Malwarbytes uncovered this phishing scam in "in the wild" actively targeting users.
Malwarebytes couldn’t trace back the origin of this campaign; however, it’s highly likely that it started off as an email pretending to be a notification. As such, be wary of any received emails containing URL(s) that may lead you to us-facebook[dot]com. Successful access to the said site immediately forwards to us-services-facebook[dot]com, as pictured below:

With the following message: Warning Account Disabled.
Be sure you have provided a contact email address that belongs to you or are logged into an account that belongs to you. For security reasons, we cannot provide information about the reported account if you email us from an address associated with another user’s account.
Please Fill Your Correct Information Below To Verify Your Account.
Once the unsuspecting user completes and confirms that section it will then bring up a "Payment Verification" form to be filled out - you can not skip this step and are then subsequently tricked into thinking you are buying Facebook credits - more like buying some cybercriminal in (whichever country) a new gadget with your credit card.
Facebook does not require payment to re-enable an account. Also, as you probably figured, your Facebook account was never disabled in the first place.
Malwarebytes couldn’t trace back the origin of this campaign; however, it’s highly likely that it started off as an email pretending to be a notification. As such, be wary of any received emails containing URL(s) that may lead you to us-facebook[dot]com. Successful access to the said site immediately forwards to us-services-facebook[dot]com, as pictured below:

With the following message: Warning Account Disabled.
Be sure you have provided a contact email address that belongs to you or are logged into an account that belongs to you. For security reasons, we cannot provide information about the reported account if you email us from an address associated with another user’s account.
Please Fill Your Correct Information Below To Verify Your Account.
Once the unsuspecting user completes and confirms that section it will then bring up a "Payment Verification" form to be filled out - you can not skip this step and are then subsequently tricked into thinking you are buying Facebook credits - more like buying some cybercriminal in (whichever country) a new gadget with your credit card.
Facebook does not require payment to re-enable an account. Also, as you probably figured, your Facebook account was never disabled in the first place.
Comments