Comments on: Spear Phishing using Facebook activity

By: Phishing in Facebook’s Pond - O'Reilly Radar

Phishing in Facebook’s Pond - O'Reilly Radar — Thu, 06 Jun 2013 18:25:05 +0000

[…] recent blog post inquired about the incidence of Facebook-based spear phishing: the author suddenly started […]

By: How Not to Go Phishing | FiWeBelize

How Not to Go Phishing | FiWeBelize — Tue, 28 May 2013 20:59:05 +0000

[…] Spear Phishing using Facebook activity (jonathanhstrauss.com) […]

By: Alexander

Alexander — Tue, 14 May 2013 19:44:47 +0000

In reply to Dana. Nope. I don't have any of his friends. His friends are Asian and mine are Caucasian and Hispanic. I think Facebook is looking at my gmail emails since it only happens when I'm logged in to both at the same time.

By: Dana

Dana — Tue, 14 May 2013 19:04:07 +0000

In reply to Alexander. He probably shows up because he's a friend of a friend.

By: Dana

Dana — Tue, 14 May 2013 18:56:51 +0000

I’ve been getting a lot of these for two or three months now. A lot come from Yahoo accounts. I forwared them to Yahoo and got a form e-mail directing me to their SPAM reporting site. I checked it out. The only thing you can do there is report SPAM you are recieving as a Yahoo customer. I guess they don’t care if their customers are the source even if the practice is illegal.

An alternative is to forward them to the US Department of Justice. They have a SPAM reporting e-mail address but I don’t remember exactly what it is right now – Google it.

By: Nick

Nick — Mon, 13 May 2013 21:48:04 +0000

In reply to Mike Loukides. Yahoo says these spams are due to a password hack and you should change your password immediately. Just adding upper lower case, a number, a special symbol increases the difficulty of hacking many fold.

By: John Mauer

John Mauer — Mon, 13 May 2013 21:42:51 +0000

Yes, I’ve seen this with friends names from Facebook. They came with either .cz addresses or yahoo addresses. I would love to know if it is possible to scrape Facebook.

By: Spear Phishing | GPLC Now

Spear Phishing | GPLC Now — Mon, 13 May 2013 18:15:43 +0000

[…] They then use that information to tailor an e-mail specific to their targeted victim. I ran across this article today discussing this very […]

By: Alexander

Alexander — Mon, 13 May 2013 15:09:50 +0000

First of all, is your facebook profile public? Which makes it easy to scrape your facebook wall.

It might or might not be related, but one thing I find interesting with Facebook is how Facebook knows about my gmail contacts. I have a Gmail contact that I regularly send emails too in Gmail. Only in Gmail. He is NOT one of my facebook friends.

When I’m logged in to Gmail and Facebook at the same time, Facebook shows me his name and profile as “People You May Know” in Facebook in the top right hand corner.

Interesting because I have never searched for him in Facebook.

By: Mike

Mike — Mon, 13 May 2013 15:00:39 +0000

I’ve gotten a number of these from family. Like lots of folks, I use facebook to keep up with family living far away. My 77 year old mother uses it to check pictures of the grandkids. How do we explain this to a 75 or 80 year old (or someone else who is technically niave) who thinks that she’s getting pictures of the grandkids?