Symantec experts have analyzed the clever Facebook scam

Jul 17, 2013 23:06 GMT  ·  By

Cybercriminals have come up with a clever way to trick users from India into helping them to lure unsuspecting Facebook customers to their phishing website.

According to Symantec, the Facebook phishing site promises free cell phone airtime.

In return, victims must “verify” their Facebook accounts by entering their email address and password. They must also like a page and subscribe to it.

However, that’s not all. The cybercrooks also ask victims to post a message that advertises the site on the timelines of 10 friends or on Facebook groups. By using this trick, the crooks increase their chances of success.

In the last phase of the phish, victims are instructed to enter their name, email, mobile phone number, operator and cellular zone.

Of course, no one gets the much-promised airtime. Instead, the crooks end up with valuable information, which they can use for all sorts of malicious operations.

In case you receive the following message from your friends, warn them that they’ve fallen victim to a phishing scam: “WOW! It worked. Yippe!! I just got a recharge of Rs500. Just try it out friends. Thanks. I love it.”