Mar 14, 2014

"(Shocking Video) 16 People dead after roller coaster crash." – Phishing Scam

A message on Facebook saying that 16 people or 17 passengers confirmed dead in a roller coaster accident in Universal Studios Theme Park Orlando, Florida is the recent scam message circulating on Facebook. It will install a Fake application and also steals your Facebook username and password. 


Clicking on the link in the Scam post will install an application and request for your permission to access your basic information and to post on your Facebook wall. Once the required permission is provided it will post the scam message on your wall to attract your friends and to spread.


The Scam is a targets Facebook user belonging to US region. If the user belongs to US region then it installs the fake app and redirects the user to the Phishing website. Otherwise, the user will be redirected to a website with roller coaster image. In the below screenshot you could see the JavaScript used to find the user's country.


Once the fake app is installed and the scam message is posted on your wall then it will redirect you to a website like shown below. It will inform you that the login information is incorrect and asks you to renter your login details to steal it. It's a fake website designed to look alike Facebook login page.


Once you enter the login information it will send the details to another website. In the below screenshot you can see the network communication how it sends the email and password information to another website.


Once the login credential is collected it will redirect user to a website like seen below. This is another fake webpage with just the roller coaster image. So it is clearly identified that this is another variant of the scam which collects user login information and installs a fake app.


Below seen are similar variants of the scam,

"Receive a FREE $250 Wal-Mart Shopping Voucher Today!"
"Claim your Free $250 Wal-Mart Now. Only a few left."
"Get a Free $250 Wal-Mart Gift Card. (373 Left)"

"Claim your $500 Victoria Secret Gift Card Now. Only a few left."
“Get a Free $500 Victoria Secret Gift Card. (221 Left)"
"Get a Free $500 Victoria Secret Gift Card"





Be aware of these scams and always stay protected. Never click on suspicious links and don't ever install or grant permission to unknown apps. If you're affected with these scam please change your login password. Report to Facebook about the app so that they can't block the app and prevent others from installing or getting affected. Then uninstall the fake app using the app settings provided on Facebook.






No comments:

Post a Comment