How Hackers Steal Facebook Passwords?

Last week I discovered a romance scam in my inbox, this week I found out another scam in my Facbook timeline. One of the common tactics is to start with some pretty girls photo, then share it to males' timeline.



When I clicked the link for more info, it kept redirecting me from

https://www.facebook.com/pages/Photo-Contest-MaLai/730133447081671?sk=app_190322544333196&pnref=story to http://benk.0xhost.net/

To continue reading, it requires user to sign in their account. I immediately spot the problem, because the URL was not belong to Facebook.


To clear my suspicious of the fake account, I input a fake ID halo@gmail.com with password 123456.



After a  successful sign in with the fake id, the page redirected again to https://www.facebook.com/pages/Photo-Contest-MaLai/730133447081671. In this stage, I could confirm that this was a fake Facebook page. If any users input with real password, the possibility is high that the hacker might have access to a user's personal facebook account.



Additional sign of fake page:
1. The page is created recently
2. It only shows a little timeline history
3. The profile photo has been stolen from another website

How to Identify Online Dating Scams?

I love being an online marketer. It helps not only in sharpening my creativity and computer knowledge, it also protects me against internet scams. Yesterday, I received a romance email from a random girl and she approached me to be her friend. The sender name is Carol Carol but the email ID is lightzup22@gmail.com, it raised my suspicion

1. Why was the sender name had no Carol-related words?
2. The email is not directed to me, it was sendt from lightzup22@gmail.com to lightzup22@yahoo.com and bcc to me.

3. "22 may refer to multiple mailing account from lightzup1@gmail.com, lightzup2@gmail.com, lightzup3@gmail.com and so on to mass out bcc email.

Romance message
"Hi and how are u doing, how is the weather with u !!! am carol by name and i like to be friend if u dont mind text me... 715 575 4940.. have a good day smiles..God bless you."



To clear my suspicion, my initial response was visit her Google+ profile, then uploaded the photo to Google images search.



Drag and drop the photo





Within a second I got following result:



Because of this scenario, I decided to write an article to warn other people and alert them about online dating scams. 

The scammer news
delphifaq.com
romancescam.com
www.fbchecker.com