Facebook phishing Scams on the Way!

Sunday, May 24, 2009

I received a message today which had "wwww whiteflash be". Its a phishing scam to extract Facebook login information. Searched twitter and found out multiple domains being used for the scam. Beware of entering any information on the following sites:

whiteflash.be
mymarket.be
vispace.be
goldbase.be
greenbuddy.be
silvertag.be
picoband.be

Google and other anti-phising services are yet not updated with these URL's to warn users. In general beware of any links that end with .be. The pages look like this:



These sites are hosted in China on IP: 211.95.78.98, with the following Whois record:

Domain: picoband
Status: REGISTERED
Registered: Fri May 22 2009

Licensee:
Not shown, please visit www.dns.be for webbased whois.

Agent:
Name: 1API GmbH
Website: www.1api.net

Nameservers:
ns1.everydns.net
ns2.everydns.net
ns3.everydns.net
ns4.everydns.net

If you have already entered your login information in any of these websites, I would suggest that you change your passwords immediately. Have a safe browsing experience!