New phishing attack against Facebook business pages

There’s a new attempt at an old phishing attack running on Facebook today.  The attack appears to target business pages on Facebook by posing as a Facebook compliance message.  Here’s a screenshot of the attack, which we received in our notifications panel on Facebook: The message appears to be a Facebook compliance message, because it uses the Facebook logo and name.  It also appears to be a direct message due to the use of “Dear Customer” in the greeting.  However there are a few things that should stand out to you as suspicious: It uses the ow.ly URL shortener and not a proper Facebook URL. It uses threatening language indicating extreme action. The message itself is nonsense.  It begins by saying that there are irregularities of content and a violation of ToS.  Then it requires you to verify your contact information, and thanks you for helping them improve ‘service collaboration.’ It is a notification and not a message.  Facebook notifications indicate shares or mentions by another user.  These are not direct messages to a customer, and normally do not include any type of greeting like “Dear Customer.” This is what you will see if you hover your cursor over the account link:   This URL is another indication that this is likely not an official Facebook communication.  If you were to follow the link to this account, you would see that this attack has targeted hundreds of business pages on Facebook. This attack page was taken offline earlier today, but there may be more versions of this page still functioning. The attack is structured as follows: The attacker identifies the business page. The attacker then shares the latest post from the business page. The share is prefaced by the message that you see in our screenshot at the top of this post. The body of the message includes a shortened link designed to look like a Facebook account verification link. These indicators should be enough for you to recognize this as a scam and...

read more