The attacker then goes through the users’ contacts, finding phone numbers or email addresses, which they can use to begin the login process before selecting the ‘forgot your password’ option. It begins with one compromised account – which can be done using any traditional phishing method or via a brute-force attack. The answer is that their message is just one part of a more sophisticated attack. Unless you know the pretext, this is a tricky scam to spot because the message really is coming from someone you know. If the victim shares the code, the fraudster can use it change the victim’s password and take control of their account. However, the code is actually part of Facebook’s password reset mechanism. Victims receive a message from one of their contacts asking for help registering for an online contest.Īccording to the message, there is a huge cash prize for the winner, and to enter, they need to share the link with a friend, who will receive an authentication code to verify that they are real. Fraudsters are hijacking Facebook accounts via Messengerįacebook Messenger users are being warned about a phishing campaign in which fraudsters impersonate your friends and hijack your account.
This month, we look at a bogus online contest designed to capture your Facebook login details, the latest Microsoft scam and whether ‘passwordless’ security can mitigate the threat of scams. Welcome to our February 2022 review of phishing attacks, in which we explore the latest scams and the tactics that cyber criminals use to trick people into handing over their personal information.
0 kommentar(er)
