Fbaction.net is a phishing attack targeting Facebook users. Tech Crunch warned on April 29, 2009, of an email send out to Facebook users that featured "Hello" in the subject line. At the end of the email message, a link opens a site called fbaction.net. Fbaction.net mimics the Facebook login page in an attempt to trick the user to sign in, giving the site access to the user's account information. Once account login is captured, fbaction.net may also access the user's friends in order to send them the phishing email.
Facebook is working to disable the fbaction.net and said "our user operations team has blocked the domain from being shared on Facebook".Tech Crunch: Phishing Attack Underway At Facebook (April 29, 2009)
Facebook Responds to Attack
- "We are aware of this phishing domain and have already begun to take action. Specifically, we have passed the domain on to Markmonitor who pushes the domain to the browsers for blacklisting. They will also actively try to disable the site at the server/domain level for people who don’t have updated browsers. Our user operations team has blocked the domain from being shared on Facebook and is removing the content retroactively from any messages. They will also be resetting passwords of senders to remove access from an attacker. We’re also reaching out to the ISPs to get information and will attempt to build a civil and/or criminal case against the owners."—FacebookTech Crunch: Phishing Attack Underway At Facebook (April 29, 2009)
- Facebook is a free social networking site founded by Mark Zuckerberg while he was a student at Harvard University in 2004. Initially, the site was only available to Harvard students but Zuckerberg allowed other Ivy League colleges access over a two year period. Eventually more colleges and universities were granted access, and eventually the site was available to the general public. In September 2008 Facebook hit a record 39 million unique visitors in the United States, representing 116% growth since 2007.Mashable: Facebook Hits Record 39MM Visitors in US (October 20, 2008)