FBaction.net Phishing Attack in Progress

F My Life: It's Funny, It's True, Except When It Happens to You

There is a Facebook phishing attack in progress right now.

Victims are receiving an email message that appears to be from Facebook with the subject that reads “Hello.” There is a link in the message that takes you to a site called fbaction.net that looks exactly like the main Facebook login page.

Whoever is behind this is clearly hoping that you will enter your Facebook credentials, thereby giving them access to your account.

Here is what the message looks like:

[Friend] sent you a message.

Subject: Hello

“Visit http://www.facebook.com/l/4253f;http://fbaction.net/”

Facebook has been made aware of the situation. Here is what they have to say regarding the fbaction.net phishing attack:

We are aware of this phishing domain and have already begun to take action. Specifically, we have passed the domain on to Markmonitor who pushes the domain to the browsers for blacklisting. They will also actively try to disable the site at the server/domain level for people who don’t have updated browsers. Our user operations team has blocked the domain from being shared on Facebook and is removing the content retroactively from any messages. They will also be resetting passwords of senders to remove access from an attacker. We’re also reaching out to the ISPs to get information and will attempt to build a civil and/or criminal case against the owners.

Facebook does now appear to be blocking all links to that domain name. Additionally, some browsers (ie: IE8) have flagged it as malicious.

If you have already logged in to the fake Facebook change, then go to the REAL Facebook site and change your password immediately.

Related Products:

Security 7.0 3-user [OLD VERSION]' title='Kaspersky Internet Security 7.0 3-user [OLD VERSION]' />Kaspersky Internet Security 7.0 3-user [OLD VERSION]