Facebook Phishing attempt, don't get fooled

Saturday, February 23 2013 @ 09:56 AM CET

Contributed by: Jerry Rocteur

Facebook Phishing attempt, don't get fooled.

This morning I received a mail appearing to come from Facebook, the subject says "You have a new message from Support", please look at attachment below but the mail says it comes from support and that my profile information is missing.

How can you tell this is not genuine and that it is a phishing scam.

1) Look at the from line and notice Support <billrocks@s2.cpanelguru.net>, it is very unlikely that Facebook email addresses would not come from a facebook email address, billrocks also smells bad

2) The email address that this was sent to is genuine but it is not an email address that Facebook knows about, I expect a mail from Facebook to be sent to one of my registered Facebook email addresses

3) Upon inspection of the email by looking at the raw source I found that the 4 links in this email all post to the same URL:
52252442.de.strato-hosting.eu/seminal.html?uid=rocteur
It is not that the following hyperlinks point to the above:
"If you don't want to receive these emails from Facebook in the future, please click:",
You have a new message from,
Your profile is missing required information.,
View Notifications,

And especially the "Go to Facebook" link ;-)

You can go further and head over to http://www.dnsstuff.com/ and check the email address, hostname and IP addresses to see where they come from, the mail comes from a data center in Michigan and nothing to do with Facebook at all.

Don't be fooled. BE CAREFUL before cliking on a link in your emails.

Comments (0)


Rocteur
http://www.rocteur.cc/geeklog/article.php?story=20130223095643419