Hackers phish login credentials by using Facebook ads

guest · Dec 29, 2020

Hackers phish 615,000 login credentials by using Facebook ads
December 28, 2020
https://www.hackread.com/hackers-phish-login-credentials-with-facebook-ads/

Facebook seems to find itself involved one way or another in every second phishing scam out there. In the latest, researchers from ThreatNix have discovered a phishing campaign that was being run using Facebook ads and redirecting users to Github where the actual phishing pages resided.

The users targeted span from a number of countries including Egypt, the Philippines, Pakistan, and Nepal with more than 615,000 of them being affected in totality.
Click to expand...

Phishing scam
The phishing campaign is executed by Facebook ads posted from pages that aim to impersonate legitimate companies in order to avoid user suspicion. For example, there was an ad that was run under “Nepal Telecom’s” name and promised users 3 GB of free internet data.

When the users clicked on the attached link, a Github page (static) was opened which was in essence a Facebook login lookalike phishing page.
Click to expand...

Commenting on the technical aspect of how this evaded Facebook’s filters, the researchers state in a blog post that:

While Facebook takes measures to make sure that such phishing pages are not approved for ads, in this case the scammers were using Bitly link’s which initially must have pointed to a benign page and once the ad was approved, was modified to point to the phishing domain.
Click to expand...

615000+ Facebook Credentials Stolen – Large Scale Phishing Campaign

We are working on taking down the phishing infrastructure by collaborating with relevant authorities as such we are withholding the information related to the domains until then. We will be providing further updates on our research once we further trace the scope of the campaign and the threat actor.

This seems to be a sophisticated large scale operation and we will continue investigating this further more.
Click to expand...

Log in or Sign up

Hackers phish login credentials by using Facebook ads

guest Guest

Log in or Sign up

Hackers phish login credentials by using Facebook ads

guest Guest

Useful Searches