A new phishing scam has set sail from the Tumblr dock on the S.S. Facebook. The scam uses the eye grabbing lure: "OMG YOUR PHOTOS ARE BEING USED ON THIS SITE" - As with pretty much all the scams we have posted about, this one will lead the unsuspecting user to an alternate site....that does not have any pictures of you on it, but does, after clicking and 'logging in', have all your Facebook login credentials.

According to the Malwarebytes blog post, the scammers use some Javascript to bounce the victim from a Tumblr spam blog to a fake Facebook login which they’ll need to use to see the supposed photos.



Anybody filling in their details and hitting enter will of course have their username and password sent to the attacker.

This sort of scam is often seen on Twitter, and regularly puts in a guest appearance or twelve on other sites.

It is always a good idea to verify any link before you click on it, especially one that attempts to make you click by using a crazy hook line....and in this scam, a sinker.