Phishing for Facebook Logins

UTS Support Posted on February 19, 2019 Posted in Alerts, Weekly Tip

The Tip

A new phishing attack has surfaced that can easily catch the most diligent of us. It is also fortunately easy to spot, once you’re aware of what to look for.

The Detail

We’ve all been to sites now that offer you the convenience of logging in with your Facebook or Google account. This is a great convenience and can really reduce the number of accounts you might need to have for casual things like news blogs and such. This new attack targets that model that we have become used to. It’s effectiveness is it’s simplicity.
Here’s how it works.

Generally when you click on a link to “log in with Facebook” you are either re-directed to Facebook or you get a pop-up window with Facebook’s login screen.
In this attack you get a pop-up window that exactly mimics the Facebook pop-up, down to the apparent lock/secure icon and green address bar.
You enter your username and password.
The login will fail, but the criminals have now captured your Facebook login credentials

How do we protect ourselves from this? Once you know what to look for, it’s actually easy to spot.

Try dragging the pop-up window away from the window it is being displayed in
If you cannot drag the pop-up away, and it instead disappears beyond the bounds of the parent window, it is a fake. DO NOT USE.

Here is a video demonstrating

If you have more questions about these topics, please contact UTS, and we’d be happy to offer what guidance we can. There is also a wealth of information to be found using your favourite search engine.

November Patch Tuesday loads up everyone’s plate November 13, 2024
Fourteen product families affected as 2024 passes an unfortunate milestone
VEEAM exploit seen used again with a new ransomware: “Frag” November 8, 2024
Last month, Sophos X-Ops reported several MDR cases where threat actors exploited a vulnerability in Veeam backup servers. We continue to track the activities of this threat cluster, which recently included deployment of a new ransomware. The vulnerability, CVE-2024-40711, was used as part of a threat activity cluster we named STAC 5881. Attacks leveraged compromised […]
Bengal cat lovers in Australia get psspsspss’d in Google-driven Gootloader campaign November 6, 2024
The Internet is full of cats—and in this case, malware-delivering fake cat websites used for very targeted search engine optimization.
Pacific Rim: Inside the Counter-Offensive—The TTPs Used to Neutralize China-Based Threats October 31, 2024
Sophos X-Ops unveils five-year investigation tracking China-based groups targeting perimeter devices
From the frontlines: Our CISO’s view of Pacific Rim October 31, 2024
On beyond “Detect and Respond” and “Secure by Design”
Pacific Rim: What’s it to you? October 31, 2024
Thirty-five years after the first great cat-and-mouse infosecurity story, here we are again
Pacific Rim: Learning to eat soup with a knife October 31, 2024
What our incident responders know from five years of fighting an octopus
Digital Detritus: The engine of Pacific Rim and a call to the industry for action October 31, 2024
Decades of obsolete and unpatched hardware and software endanger us all
Pacific Rim timeline: Information for defenders from a braid of interlocking attack campaigns October 31, 2024
Sophos X-Ops unveils five-year investigation tracking China-based groups targeting perimeter devices
Sophos Firewall hardening best practices October 25, 2024
Make the most of your Sophos Firewall.

Nipissing University
100 College Drive, Box 5002
North Bay, ON, Canada
P1B 8L7
Tel: 705.474.3450
Fax: 705.474.1947

Phone Directory
NU Mail
Health & Safety
Site Map

MyNipissing
WebAdvisor
Blackboard
Library