After a virus campaign, MX Lab now also intercepts a phishing campaign targetting Facebook users.

The From address is obviously fake and not related to Facebook in any way. This email in particular was directing users to the phishing site hxxp://www.facebook.com.saxzask.me.uk/globaldirectory/LoginFacebook.php?ref=******&email=info@****.com. Unfourtunalty, this host was already down when visiting so we didn’t had the chance to investigate it further but we’ll keep an eye on new ones.
6 Comments
Comments RSS TrackBack Identifier URI
Leave a comment

[...] Email regarding Facebook account update is a phish [...]
Just got one which is using this link.
http://www.facebook.com.iooolior.eu/globaldirectory/LoginFacebook.php?ref=*****************************************&email=****@******.net
i get at least one of these a DAY!
[...] Facebook account update (part 1) Facebook account update (part 2) [...]
I have been receiving this Facebook eamil for the past 3 days…so, I guess that it’s back!
Yes, we have posted an article abou the new campaign yesterday. The treath combines phishing techniques, malware downloads and a PDF exploit.
Read the full article: http://blog.mxlab.eu/2009/12/08/facebook-subject-to-campaign-that-combines-phishing-and-malware/