Web Security News

Phishing attacks target Facebook, Twitter users

Thursday, October 29, 2009

Cyber attackers have launched multiple phishing scams this week hoping to steal login names and passwords from Facebook and Twitter users with sophisticated spam emails.

Two rival botnets of infected PCs, called Bredolab and Zeus/Zbot, have been used by criminals to launch attacks on Facebook, sending more than a million fake messages in recent days, according to web security experts.

The Facebook scam emails also contain malicious attachments to infect victims' PCs with a computer virus that can link more PCs into the botnets for sending out spam.

Twitter also warned users Wednesday of phishing attacks in direct messages on the site that ask users to reset their passwords.

Meanwhile, a report from the Anti-Phishing Working Group reveals that the ongoing battle with cyber criminals has reached a sort of stalemate. The group's October report says phishing gangs using a toolkit for establishing phishing websites are setting up the sites more rapidly, but takedown efforts close these sites faster as well.

Phishing scams are among the most popular forms of identity theft on the internet, tricking millions of victims into giving up passwords, bank account numbers and other vital information.