An intelligence firm has found that a cybercriminal has obtained one million Facebook account credentials in four months as hundreds of Facebook users fell victim to phishing scams. According to PIXM, an anti-phishing firm, a phony login gateway was used as an alternative to Facebook’s landing page and it was found that those who entered their account information on the page had been stolen.
When PIXM further investigated the fake landing page, it found “a reference to the actual server hosting the database server to collect the users’ entered credentials” which was replaced with a valid URL and whose A series of redirects occurred as a result.
PIXM also discovered a link within the code to a traffic monitoring application, allowing the anti-phishing firm to view tracking metrics. As a result, PIXM discovered not only traffic information from cybercriminals’ pages, but many other bogus landing pages as well.
It was later revealed that the links were coming from Facebook, as the threat actors would gain access to the victim’s account, and then send the harmful link to the victim’s friend group in order to develop more account credentials.
Websites will deploy and generate fake Facebook landing page URLs using services such as glitch.me, famous.co, amaze.co, and funnel-preview.com, thus allowing individuals to log in and steal their account information. will be tricked.
According to the researchers, the phishing scams were traced back to a cybercriminal in Colombia and an email account used in online attacks.
Phishing is a type of online scam that targets consumers by sending an e-mail that appears to be from a well-known source, such as an Internet service provider, bank or mortgage firm. It requests personally identifying information from the customer.
According to the researchers, after additional analysis, it appears that the attacks were coming from the email address of a threatening actor in Colombia as well as the perpetrator.
read all breaking news , today’s fresh news watch top videos And live TV Here.