Scammers Impersonate Meta in Facebook Campaign With 3200 Profiles

A new phishing plan aimed at Facebook customers and relying on above 3000 pretend profiles has found menace actors trying to steal account qualifications.

Team-IB Digital Risk Defense (DRP) industry experts explained the campaign in an advisory published these days, incorporating that it is even now active at the time of crafting.

“Throughout February and March 2023, Group-IB researchers discovered far more than 3,200 scam profiles that have been possibly compromised or developed by the cybercriminals who introduced this marketing campaign,” wrote Team-IB’s Sharef Hlal and Karam Chatra.

“The scam is executed in far more than 20 languages, despite the fact that Group-IB specialists uncovered that the wide greater part of the profiles impersonating Meta posted in English.”

In accordance to the security industry experts, the ultimate intention of this campaign is to acquire obtain to the Fb accounts of community figures, celebs, enterprises and sports teams, amid other folks, to steal delicate information and facts and use it to access additional accounts.

“The latter is achievable supplied the all-too-typical prevalence that a human being makes use of the similar mixture of username and password for numerous products and services, and this poses significant hazards for their accounts on monetary providers platforms,” reads the Team-IB advisory.

From a complex standpoint, the hackers included in this campaign mostly relied on phishing web-sites impersonating the Facebook login webpage, as nicely as session hijacking attacks aimed at stealing browser cookies.

Study extra on Fb-aimed attacks: Hackers Use S1deload Stealer to Concentrate on Facebook, YouTube Consumers

“The scammers impersonate Meta, Facebook’s parent company, in their public posts and on any of their more than 220 phishing web pages,” Hlal and Chatra wrote.

“They proper Meta and Facebook’s official logos on their social media profiles and phishing web internet pages to make them appear respectable and honest in the eyes of buyers. These bogus profiles have very little to do with Fb, and they are regularly taken down speedily by the social network.”

The publication of the advisory, which features a complete evaluation of procedures used in this marketing campaign, will come months after Meta took down two individual disinformation functions originating in China and Russia.

Editorial picture credit rating: Ink Fall / Shutterstock.com

Some parts of this short article are sourced from:
www.infosecurity-journal.com