Malicious Facebook activity offering transportation discounts to users
A widespread phishing scam targeting public transport services on Facebook has been identified, affecting a staggering 746 cities and regions across 60 different countries. The scam involves the creation of fake Facebook pages that mimic local public transportation services, offering travel cards at unusually low prices to lure unsuspecting users into phishing websites.
The scam, which has a global reach, is present in cities ranging from Dakar in Senegal to Astana in Kazakhstan. More than half of the administrators of these fake pages are believed to be located in Vietnam, while the majority of the promoted domains are hosted on just two IP addresses from the same provider in Russia.
These phishing pages have managed to spread their scam posts through over 9,000 paid ads on Facebook and Instagram. Despite having few followers, the ads have been successful in reaching a large audience. Meta's advertising system played a significant role in the spread of the scam, although Meta removed at least one ad on 55% of these pages for violating advertising rules.
To avoid falling victim to this scam, users are advised to avoid engaging with suspicious pages or links offering unrealistically low prices. If you encounter such a page, it is important to report it to Facebook for violating terms of service, and to inform local authorities or cybercrime units about the scam.
In addition, it is crucial to ensure your browser and device are updated with the latest security patches, and to be cautious with links and forms on unverified websites. Never enter personal or financial information on unverified websites, and enable two-factor authentication for your accounts to prevent unauthorized access.
Monitoring these types of scams is crucial to maintaining online security, and reporting suspicious activities can help prevent others from falling victim. Germany, France, Spain, and the UK are among the most affected countries, with over 1,000 such scam pages identified on Facebook by the Spanish fact-checking organization "Maldita.es".
If you have fallen for the phishing scam, it is important to file a report with your local police or the online police station responsible for your area. The details entered on phishing sites are not sent to the public transport operator or network whose name has been misused.
Stay vigilant and protect your personal information by following these simple steps to ensure your online safety.
- The cybersecurity threat, originating from a phishing scam targeting transport services on Facebook, has not only permeated regions such as Dakar in Senegal and Astana in Kazakhstan, but also countries across the globe, demonstrating the need for enhanced technology-based security measures.
- To safeguard yourself from falling prey to such cybercrimes, it is crucial to exercise caution when encountering suspicious pages or links offering unrealistic deals, report such violations to Facebook, and ensure your device and browser are continually updated with the latest security patches.
