Deconstructing the phishing hook on Facebook -Warning Posted on April 4th
-
WARNING - do NOT click on ANY links on this article, until you have read the entire article and understand how they work.
Firstly - if this has happened to you - log-in to facebook and change your password. That will fix the issue.
Has your facebook account been violated? Are you sure? A lovely friend of mine left me a message on my wall. Anna is a trusted friend. She showed me a wonderful time in Shanghai when I was over there and has some great friends that I met.
-
WARNING - do NOT click on ANY links on this article, until you have read the entire article and understand how they work.
-
WARNING - do NOT click on ANY links on this article, until you have read the entire article and understand how they work.
So - when I see a message on my wall from Anna, saying
“mate she’s ma new friend add her up and give her a lil time as she is new here
”
her profile is at
http://www.facebook.com.profile.id.cdyoungnieustepliwosc.kapital.31c5f18a7f.com/facebook/index.php?id=bigfish&auth=mnjnjmkoknZ&cyua=stawialo” my initial thought (like any young man on facebook) is how cute is this friend!?!?
HOWEVER - I also know that’s not how profile URL strings look, because I happen to be an adept stalker on facebook etc and tried many ways to see more of profiles than Im allowed.
So what is it? The website is NOT facebook.
If you break down all the dots’ in the URL it becomes clearer - for example - this blog is on digital.chrisbrinkworth.com the main domain is chrisbrinkworth.com. When you break down all the dots of the above it becomes thus:
www.
facebook.com.
profile.
id.
cdyoungnieustepliwosc.
kapital.
31c5f18a7f.com then the /facebook/index.php?id=bigfish&auth=mnjnjmkoknZ&cyua=stawialo bit.
So - the main domain is www.31c5f18a7f.com and not Facebook. What i LOVE about this is they even put the words ‘bigfish’ into the php string like the calling card the old-school theives leave in the heist movies.
So - It’s a phising site designed to get your log-in and password - so they can do all sorts of fun automated things logged in as you. They use your trust in Facebook and that in your friends to con you into giving them your log-in details to your facebook account - then post on everyone’s walls the same scam that got YOU in this mess.
So - now you know what it is, do the following steps EXACTLY to safely understand the con.
1)Click on Anna’s link above (the full version)
2)Look at how it’s exactly like Facebook
3)DO NOT ENTER YOUR REAL EMAIL ADDRESS OR PASSWORD
4)Enter a pretend email address and a made up password.
5)Look where it takes you. It takes you back to facebook! - but you are still not logged in.
If you had used your real details the same would’ve happend - you wouldn’t be logged in - but your account details would’ve been stolen and all of YOUR friends will be getting a message on their wall very shortly from ‘the robot’ and not you. The thing is - most people have no idea and the robot may wait a week before going into your account. IE - it may decide that as you and most of your friends are in the Sydney network - it will wait till 3am on a tuesday to post on all their walls. That way, you dont know that it’s happened until you’ve had breakfast etc.. and logged on - and by then, many people would have fallen for the same phising trick.
I reccomend that you change your password regularly like I do just in case. You never know who currently has it.
Sphere: Related ContentTrackback URL

















































SUCH a smart cookie. I was going to send you a pasted link to my new Designer bio on the DWR website - because I am excited! - but am now fascinated by scam instead. Interesting. Good site Chris.
Commented Sally Dominguez on April 5th, 2008.[…] - bookmarked by 1 members originally found by bruno1378 on July 18, 2008 Deconstructing the phising hook on Facebook -Warning http://chrisbrinkworth.com/digital/media/?p=30 - bookmarked by 3 members originally found by […]
Commented Bookmarks about Phising on August 4th, 2008.