If you receive an email informing you that Facebook has deactivated your account, do not click on the link!
It is a new phishing attack where the user receives an email allegedly from Facebook informing them that their account has been deactivated, and offering them a link where they should confirm or cancel the deactivation. Of course, it is known that Facebook never sends such messages to the user's email.
If you click on the link with the inscription "click here", a message will appear asking for permission from the user to run the Java applet. Even if the user does not want to allow it to run, the third-party application will insist on allowing the applet to run.
When the Applet is allowed to run, a message will appear informing the user that Flash Player should be updated. Accepting the update actually installs the SpyEye-B and Agent-WHZ trojans on the system, which will allow attackers to integrate the infected computer into a botnet.
This way of deceiving users is quite old, but users don't even know how to recognize Phishing and what to do at that moment. So don't open any links, turn on HTTPS while surfing Facebook (See how), and always check which link you are on.
I already wrote how to protect yourself from Phishing, so see https://do-you-know-tech.blogspot.com/2012/03/what-is-phishing-and-how-to-protect.html
Comments
Post a Comment