New Scam Steals Financial Information from Facebook, Gmail, Yahoo, and Hotmail users
Better Business Bureau is warning consumers of a scam targeting the financial data of Facebook, Hotmail, Yahoo, and Gmail users. The scam infects its victim’s computers with a version of the Zeus Trojan virus- a malware program regularly used to commit bank fraud.
Trusteer, the computer security firm that discovered the scam, says the virus targets Facebook users by getting them to link their Visa or MasterCard debit cards to their Facebook account; enticing them with a fake 20 percent cash back offer.
Malware scams on social networks can be particularly malicious because the fraudulent offers appear to come from trusted friends. In the case of Facebook, scammers will often hijack a user’s account by getting the user to click on their post and accept their application, which can give the scammers access to all of the user’s account information, and allow them make unauthorized posts in the user’s name.
The Zeus Trojan virus has been used by scammers for years to steal financial information from unsuspecting consumers. Different versions of the virus are used by vast international crime syndicates, who have employed the virus to steal over $60 million and infect over 4 million computers in 196 countries since 2007, according to the FBI.
BBB offers these tips to users of social networks to avoid scams:
- When using Facebook, never install a game or an application that you’re not entirely sure is legitimate.
- On Facebook and Twitter be wary of posts from friends that use overtly promotional language. Examples would be: “Check out how I lost 20 pounds in two weeks,” or “I just received a FREE $50 Amazon gift card. Click here to get yours!” A good rule of thumb: if it doesn’t seem like language your friend would normally use, your friend probably didn’t post it.
- Never click on Facebook posts, or install applications, that claim they will tell you which of your friends viewed your profile. It’s impossible to find out who is viewing your profile, and any application that claims it can show you is a scam.
- On Twitter and Facebook beware of promotional offers using shorted links that look similar to this: http://is.gd/b8XwNO. While shortened links are commonly used by legitimate businesses, they mask the true URL of the destination Web site, and scammers will use them to direct their victims to sites that will infect their computers with malware.
- If you mistakenly install a dubious application on Facebook click on the “Home” icon in the top right-hand corner of the site, and go to “Account Settings.” On the right-hand column of the page click on the icon that says “Apps,” and uninstall the suspect application. After you do that, BBB recommends you change your account password in case that has been compromised as well.
For more information on how you can keep your financial and personal data safe online visit www.bbb.org/data-security. If you think you may have been a victim of an online scam you can file a complaint with the FBI atwww.ic3.gov, or call BBB at (520)888-5353 for information on what to do.
Facebook Scam Fakes Account Cancellation Notice
Facebook users, watch out. A clever scam in the form of a fake account cancellation email is making the rounds, and it’s easy to get fooled. Don’t let the threat of losing your account trick you into installing malware on your computer.
How the Scam Works:
The scam starts with a suspicious email informing Facebook users that they have a received an “account cancellation request,” reports computer security blog Naked Security. (See sample email below) Recipients are urged to follow a link to cancel the request:
Here’s the clever part. The link appears to be official because it goes to a facebook.com address. Really, it links to a third-party application just running on the Facebook platform.
If you do click on the link, a message asks you to allow an unknown application to run on your computer. Click the “run” button, and you will see a message telling you to download the new version of Adobe Flash. The file that downloads is not the latest version of Flash, but code allowing hackers to spy on your activties and take control of your computer.
For More Information
For more information and screen shots of the scam, see Naked Security’s original article.
For more scams in your area, check out BBB’s complete scam directory.