{"id":16860,"date":"2019-11-11T11:10:05","date_gmt":"2019-11-11T19:10:05","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2019\/11\/11\/news-10598\/"},"modified":"2019-11-11T11:10:05","modified_gmt":"2019-11-11T19:10:05","slug":"news-10598","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/11\/11\/news-10598\/","title":{"rendered":"Facebook scams: Bad ads, bogus grants, and fake tickets lurk on social media giant"},"content":{"rendered":"<p><strong>Credit to Author: Christopher Boyd| Date: Mon, 11 Nov 2019 18:27:46 +0000<\/strong><\/p>\n<p>We recently highlighted new steps Instagram is taking to try and <a href=\"https:\/\/blog.malwarebytes.com\/social-engineering\/2019\/10\/instagram-clamps-down-on-fake-messages-with-anti-phishing-tool\/\" target=\"_blank\" rel=\"noopener noreferrer\">clamp down on scammers<\/a> sending fake messages on their platform. It turns out, other social media giants are walking a similar path for a variety of bogus ads and other attacks. Facebook scams in particular have taken off, despite the company&#8217;s efforts to stamp them out.<\/p>\n<p>Facebook is now extending a rollout of their <a href=\"https:\/\/www.theguardian.com\/technology\/2019\/nov\/07\/facebook-urges-australians-to-report-fake-ads-as-it-launches-tool-to-target-scammers\" target=\"_blank\" rel=\"noopener noreferrer\">bogus ad reporting tool to Australia<\/a>, after a variety of popular Australian celebrities kept appearing in fake ads. Regular readers may remember the genesis of this reporting tool being <a href=\"https:\/\/blog.malwarebytes.com\/scams\/2019\/07\/new-facebook-ad-reporting-tool-launches-in-uk\/\" target=\"_blank\" rel=\"noopener noreferrer\">a similar incident in the UK<\/a> involving popular consumer advice expert Martin Lewis.<\/p>\n<p>Facebook&#8217;s ad reporting tool will allow Australian users to flag dodgy investment schemes or hard-to-cancel product trials\u2014this alongside the corporation&#8217;s claims to have already shut down some 2.2 billion fake accounts worldwide.<\/p>\n<p>While this is certainly welcome news for users of the social media platform, there\u2019s still an awful lot of bad ads currently in circulation outside of these fake offers and adverts. Below, we\u2019ll lead you through some of the more popular and current Facebook scams, such as efforts to hijack your social media account, swipe personal information, and of course, part you from your money.<\/p>\n<h3>Rogue ad campaigns<\/h3>\n<p>Scammers will happily compromise social media accounts, and then use them to <a href=\"https:\/\/www.cnet.com\/news\/your-hacked-facebook-account-may-be-bankrolling-scam-ad-campaigns\/\" target=\"_blank\" rel=\"noopener noreferrer\">purchase thousands of dollars of ad space<\/a> before they can be shut down. In the examples given, one victim only had the ad campaign shut down because his credit card expired\u2014else he feared he\u2019d have been hit by $10,000 in credit card debt. Another had adverts running for about $1,550 per day until notified by PayPal. Ironically, one of the victims runs a business focused on privacy-themed adverts.<\/p>\n<p>Some of the bogus ads listed certain items at a cheap price to make it look as though it had to be a pricing error of some sort. This is a common tactic going back many years, but the twist here is that the landing pages contained <a href=\"https:\/\/blog.malwarebytes.com\/web-threats\/2019\/08\/no-summer-break-for-magecart-as-web-skimming-intensifies\/\" target=\"_blank\" rel=\"noopener noreferrer\">credit card skimmers<\/a> so anyone paying up for a bargain had their payment details swiped instead.<\/p>\n<h3>Concert ticket fakeouts<\/h3>\n<p>Facebook is a popular place for some social event wheeling and dealing, especially in dedicated groups and fan pages. It turns out <a href=\"https:\/\/nowtoronto.com\/music\/features\/facebook-ticket-scam-concerts\/\" target=\"_blank\" rel=\"noopener noreferrer\">fake messages advertising non-existent tickets<\/a> are also, sadly, quite popular.<\/p>\n<p>Here&#8217;s how it works: Facebook scammers wait for an event coming up, the smaller the better to fly under the radar. At this point, they cut and paste the same bogus \u201cI have free tickets but I can\u2019t make it\u201d message and wait for the replies to come flooding in. They&#8217;ll list the typical reasons why they can&#8217;t go: \u201cI\u2019m out of town\u201d, \u201cI\u2019m undergoing surgery\u201d, or\u201cthere\u2019s a family emergency.\u201d<\/p>\n<p>If you spend enough time digging around, you\u2019ll likely see the same cut and paste missive posted by multiple, supposedly independent accounts. One quick dubious money transfer later and you\u2019ll be out of pocket with no tickets to show for it. Keeping track of <a href=\"https:\/\/www.facebook.com\/InertiaEntertainmentdotcom\/photos\/a.10150206427169883\/10157007499599883\" target=\"_blank\" rel=\"noopener noreferrer\">event organiser pages<\/a> when looking for tickets is a must to ensure you don\u2019t fall for the same scam.<\/p>\n<h3>Clones, messenger grant scams, and lottery shenanigans<\/h3>\n<p>The old problem of \u201ccloned\u201d accounts <a href=\"https:\/\/wpta21.com\/uncategorized\/2019\/11\/06\/digging-deeper-twists-to-an-old-scam-are-fooling-plenty-of-facebook-users\/\" target=\"_blank\" rel=\"noopener noreferrer\">rears its ugly head once more<\/a>. Cloning happens when a scammer can\u2019t gain control of a genuine social media account, so they do the next best thing\u2014steal the photo, the bio, and any other pertinent information to replicate the real thing. From there, they try to social engineer their way into the victim\u2019s bank balance.<\/p>\n<p>The smartest part about these Facebook scams is the cloning and mapping out of potential contacts to try and trick. After that, tactics fall back to the more mundane. Scammers will message contacts with: \u201cI\u2019ve been in an accident and need help\u201dor \u201cI\u2019m overseas and have lost my wallet\u201d pleas for help. In this case, \u201cA grant is available\u201d is a commonplace and quite an old technique. The current keywords to set off alarm bells include gift cards, world bank, and grants. If you see any of those suddenly dropped into a conversation, it\u2019s almost certainly going to be a scam.<\/p>\n<p>If in doubt, check that the person talking to you is actually in your friends list\u2014clones won\u2019t be. Additionally, if it is genuinely your friend that doesn\u2019t mean the danger is over. What it actually means is that they were probably compromised and don\u2019t know about it. In both cases, find an alternate means to get in touch and verify the who, what, when, where, and why.<\/p>\n<p>Lottery messenger scams work along similar lines. They <a href=\"https:\/\/www.nbcnews.com\/better\/business\/how-avoid-these-social-media-prize-scams-ncna879971\" target=\"_blank\" rel=\"noopener noreferrer\">claim you\u2019ve won a prize<\/a>, but once you\u2019ve contacted a third party to claim your winnings, you\u2019ll find you need to send them money for a variety of not quite plausible reasons. Often, the profiles telling you that you\u2019ve won will imitate Mark Zuckerberg.<\/p>\n<h3>Don&#8217;t get fooled on Facebook<\/h3>\n<p>Looping back around to our initial fake Facebook ad problem, you can read a little more about how they operate under the hood <a href=\"https:\/\/www.buzzfeednews.com\/article\/craigsilverman\/facebook-subscription-trap-free-trial-scam-ads-inc\" target=\"_blank\" rel=\"noopener noreferrer\">over on BuzzFeed<\/a>. We\u2019ve covered many Facebook fakeouts down the years, our most recent being the wave of <a href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2019\/04\/ellen-degeneres-giveaway-scam-spreading-on-social-media\/\" target=\"_blank\" rel=\"noopener noreferrer\">bogus Ellen profiles<\/a> pushing movie streaming services.<\/p>\n<p>The good news is that most, if not all, of these Facebook scams have been done before. If you\u2019re not sure, a quick search will reveal prior examples covered on news sites, security blogs, or forum posts.<\/p>\n<p>Always be cautious, remember the old \u201cif it&#8217;s too good to be true, it probably is\u201d routine, and keep yourself scam free on social media.<\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/scams\/2019\/11\/facebook-scams-bad-ads-bogus-grants-and-fake-tickets-lurk-on-social-media-giant\/\">Facebook scams: Bad ads, bogus grants, and fake tickets lurk on social media giant<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n<p><a href=\"https:\/\/blog.malwarebytes.com\/scams\/2019\/11\/facebook-scams-bad-ads-bogus-grants-and-fake-tickets-lurk-on-social-media-giant\/\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Credit to Author: Christopher Boyd| Date: Mon, 11 Nov 2019 18:27:46 +0000<\/strong><\/p>\n<table cellpadding='10'>\n<tr>\n<td valign='top' align='center'><a href='https:\/\/blog.malwarebytes.com\/scams\/2019\/11\/facebook-scams-bad-ads-bogus-grants-and-fake-tickets-lurk-on-social-media-giant\/' title='Facebook scams: Bad ads, bogus grants, and fake tickets lurk on social media giant'><img src='https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2019\/11\/shutterstock_281706974.jpg' border='0'  width='300px'  \/><\/a><\/td>\n<\/tr>\n<tr>\n<td valign='top' align='left'>Despite the company&#8217;s efforts to clamp down on bad ads and bogus accounts, Facebook scams continue to run rampant. We highlight a few popular examples.<\/p>\n<p>Categories: <\/p>\n<ul class=\"post-categories\">\n<li><a href=\"https:\/\/blog.malwarebytes.com\/category\/scams\/\" rel=\"category tag\">Scams<\/a><\/li>\n<\/ul>\n<p>Tags: <a href=\"https:\/\/blog.malwarebytes.com\/tag\/advertising-reporting-tool\/\" rel=\"tag\">advertising reporting tool<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/cloned-accounts\/\" rel=\"tag\">cloned accounts<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/concert-tickets-scams\/\" rel=\"tag\">concert tickets scams<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/facebook\/\" rel=\"tag\">facebook<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/facebook-bad-ads\/\" rel=\"tag\">facebook bad ads<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/facebook-scams\/\" rel=\"tag\">facebook scams<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/grant\/\" rel=\"tag\">grant<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/lottery\/\" rel=\"tag\">lottery<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/messenger-grant-scams\/\" rel=\"tag\">messenger grant scams<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/rogue-ad-campaigns\/\" rel=\"tag\">rogue ad campaigns<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/scam\/\" rel=\"tag\">scam<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/social-media\/\" rel=\"tag\">social media<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/social-media-scams\/\" rel=\"tag\">social media scams<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/tickets\/\" rel=\"tag\">tickets<\/a><\/p>\n<table width='100%'>\n<tr>\n<td align=right>\n<p><b>(<a href='https:\/\/blog.malwarebytes.com\/scams\/2019\/11\/facebook-scams-bad-ads-bogus-grants-and-fake-tickets-lurk-on-social-media-giant\/' title='Facebook scams: Bad ads, bogus grants, and fake tickets lurk on social media giant'>Read more&#8230;<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/scams\/2019\/11\/facebook-scams-bad-ads-bogus-grants-and-fake-tickets-lurk-on-social-media-giant\/\">Facebook scams: Bad ads, bogus grants, and fake tickets lurk on social media giant<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[23417,23418,23419,3589,23420,23421,23422,17183,23423,23424,3985,10574,1932,23213,10452],"class_list":["post-16860","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-advertising-reporting-tool","tag-cloned-accounts","tag-concert-tickets-scams","tag-facebook","tag-facebook-bad-ads","tag-facebook-scams","tag-grant","tag-lottery","tag-messenger-grant-scams","tag-rogue-ad-campaigns","tag-scam","tag-scams","tag-social-media","tag-social-media-scams","tag-tickets"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/16860","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=16860"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/16860\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=16860"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=16860"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=16860"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}