FBstarter: Another Facebook Phishing Scam to Look Out for

Yesterday, it was the FBaction Facebook phishing scam that caused a great deal of commotion. Today's Facebook phishing scam is known as FBstarter (let's hope this is not the start of a trend here). Similarly to FBaction, Facebook users may receive a message containing a link that directs them to fbstarter.com. This site looks like a normal Facebook login page, but if the user logs in from this page, the login credentials will be sent right to the scammer.

So, here's what to do in order to make sure your information is not exploited:

• Do not click on any links that contain "fbstarter" or "fbaction" in them
• Avoid putting any extra sensitive informaiton on your Facebook account, such as credit card numbers
• Always make sure you are at the official Facebook website page when you are logging in - the URL will simply be http://www.facebook.com/

All in all, as long as you follow these steps and use common sense, you should be fine and will not be affected by this Facebook phishing scam.

FBaction Facebook Phishing Scam

It looks like the Facebook stalkers just keep coming up with clever ways to always know what you are doing. An email has been circulating that appears to be an official email from Facebook, although it really isn't. The message contains a link in it that will redirect you to the domain fbaction.net. At that site, you are asked to login to your Facebook account, and it looks like a convincing login page. Of course, it won't log you into your Facebook account though. Instead, your login credentials will go straight to the sly phisher.

Again, it must be a stalker right? After all, I don't think scammers will be able to steal credit card information from a Facebook account ...

Facebook responded quickly to the issue. A Facebook representative said:

We are aware of this phishing domain and have already begun to take action. Specifically, we have passed the domain on to Markmonitor who pushes the domain to the browsers for blacklisting. They will also actively try to disable the site at the server/domain level for people who don’t have updated browsers. Our user operations team has blocked the domain from being shared on Facebook and is removing the content retroactively from any messages. They will also be resetting passwords of senders to remove access from an attacker. We’re also reaching out to the ISPs to get information and will attempt to build a civil and/or criminal case against the owners.

Google also recognizes the site as a phishing site, as you can see in the picture above.

So, don't click any links that contain "fbaction" in them and you'll be fine.