hati - hati email palsu dari facebook palsu, check it out...

haii adders, barusan dpt email dr facebook ttg new login system or facebook update tool, trus di suruh klik link nya. tapi, sy kagak klik link nya takut bo'ongan...jadi search di mbahh google dulu deh, ehhh...gak tau nya, trnyata beneran email BO'ONGAN dr facebook BO'ONGAN jg lohh...ckckck apa kata dunia???.

ini dia penjelasan salah satu dr skian byk situs yg menjelaskan ttg email palsu ini, so check it out...

Zbot goes Facebooking

It’s just a few days since I blogged about spammed email messages containing the subjects “Facebook Password Reset Confirmation” and “FDIC has officially named your bank a failed bank”.

Today, Zbot (also known as Kollah) has another wave of spammed emails. It joins Bredolab malware in using the social networking site, Facebook, to attack users. But this time, it is phishing with a twist!

We received new spammed emails disguised as a legitimate email from “Facebook”. This spammed email contains the email subject “New login system” and requests the user to update their account by clicking on the “here” or the “Update” button [Figure 1].

                                                       [Figure 1 – Fake Facebook email]

The email contains the Subject: New login system

The email contains the Body:

--------------------------------------------------------------------------------------------------------

Dear Facebook user,

In an effort to make your online experience safer and more enjoyable, Facebook will be implementing a new login system that will affect all Facebook users. These changes will offer new features and increased account security.
Before you are able to use the new login system, you will be required to update your account.
Click here to update your account online now.

If you have any questions, reference our New User Guide

Thanks,
The Facebook Team

This message was intended for ****.****@yahoo.com.
Facebook's offices are located at 1601 S. California Ave., Palo Alto, CA 94304.

--------------------------------------------------------------------------------------------------------
Other emails may contain the following Subjects:

    * Facebook account update

    * Facebook Update Tool

By clicking “here” and “Update” button (as highlighted in Figure 1), the user will be redirected to a bogus Facebook website and asks the user to input their Facebook login details in order to update their account, see Figure 2.

                                                [Figure 2 – Fake Facebook Login Page]

Once the user entered their login details, username and password will be sent to the malware server using HTTP POST command, see Figure 3.