We're unsure whether those accounts were compromised or not, but we noticed that the same account posted more than one malicious link but at different time intervals, indicating that it might have been controlled by a threat actor.
We identified several Facebook accounts that were posting a number of stories, ranging from clickbait articles to newsworthy content. However, when a link is posted for an external website, Facebook can no longer control the user experience, and in particular any risk that may occur from visiting it. Facebook posts with malicious linksįacebook relies on users sharing content by posting photos, videos or links to various stories. We have reported these incidents to both Facebook and Google. In this blog, we expose the techniques used by scammers to lure victims while evading detection. We've previously never seen tech support scams hosted on Google's serverless platform, and certainly not at this scale. What is unique with this campaign is the abuse of Google Cloud Run to generate new malicious links every few minutes. Online criminals are notorious for lurking on social media sites and tricking users into visiting malicious links. We recently observed a scheme where Facebook users are clicking on posts that lead to external websites set up for the sole purpose of scamming them out of hundreds of dollars via fake browser alerts.
0 kommentar(er)
