See your link here
Two-faced Facebook friends
6 commentsIt didn't come as much of a surprise months ago when Symantec Corp. revealed that they'd found that social networking sites were the primary targets of phishing web sites. A couple of days ago the Websense Security Labs ThreatSeeker Network issued an alert that warned of a new spam campaign that targets Facebook users. Bogus but official looking emails are sent to users notifiying them that another Facebook user has added them as a friend.
Unsuspecting recipients may have their curiosity piqued (right there alarm bells should start sounding), leading them to double-click on the zip attachment to see a photo. This is a classic social engineering tactic; it preys upon a combination of the victim's curiosity, vanity and trust.
According to the Websense alert, a login page to Facebook is included in the body of the email and surprisingly, that was legitimate - a user entering their email address and password would end up at the real Facebook site. Having that part of the email be real makes the entire email seem inocuous - but beware.
Print
Email this
Digg this
