A message on Facebook saying that 16 people or 17 passengers confirmed dead in a roller coaster
accident in Universal Studios Theme Park Orlando, Florida is the recent scam message circulating on Facebook. It will install a Fake application and also steals your Facebook username and password.
Clicking on the link in the Scam
post will install an application and request for your permission to access your basic
information and to post on your Facebook wall. Once the required permission is provided it will post the scam message on your wall to attract your friends and to spread.
The Scam is a targets Facebook user belonging to US region. If the user belongs to US
region then it installs the fake app and redirects the user to the Phishing
website. Otherwise, the user will be redirected to a website with roller
coaster image. In the below screenshot you could see the JavaScript used to find the user's country.
Once the fake app is installed and
the scam message is posted on your wall then it will redirect you to a website like
shown below. It will inform you that the login information is incorrect and asks
you to renter your login details to steal it. It's a fake website designed to look alike Facebook login page.
Once you enter the login information it will send the details to another website. In the below screenshot
you can see the network communication how it sends the email and password information to another website.
Once the login credential is collected it will redirect user
to a website like seen below. This is another fake webpage with just the roller
coaster image. So it is clearly identified that this is another variant of the
scam which collects user login
information and installs a fake app.
Below seen are similar variants of the scam,
"Receive a FREE $250 Wal-Mart Shopping Voucher
Today!"
"Claim your Free $250 Wal-Mart Now. Only a few
left."
"Get a Free $250 Wal-Mart Gift Card. (373 Left)"
"Claim your $500 Victoria Secret Gift Card Now. Only a
few left."
“Get a Free $500 Victoria Secret Gift Card. (221 Left)"
"Get a Free $500 Victoria Secret Gift Card"
Be aware of these scams and always stay protected. Never click on suspicious links and don't ever install or grant permission to unknown apps. If you're affected with these scam please change your login password. Report to Facebook about the app so that they can't block the app and prevent others from installing or getting affected. Then uninstall the fake app using the app settings provided on Facebook.
No comments:
Post a Comment