Several sources began to report a phishing scam this week targeted Facebook users.
Impacted users see wall posts, messages that any visitor to a Facebook profile page can leave for the owner of the page, with the message:
"Hey, I am a new facebook account. Im going to remove it, so add my new profile "
accompanying the message is a link to a site that appears to be a Facebook login page that invites users to enter their user name and password Facebook. This page is not associated with Facebook and it is likely that the goal of the scam is to get Facebook users to display their credentials. As we have in our identity theft protection guide to Facebook, this information can be the gateway to identity theft or worse.
What makes this type of phishing attack is so powerful that messages appear to come from Facebook user's friends who receives the message while in fact they come from a third party criminal.
We strongly suggest that Facebook be careful when you click on links in received messages in Facebook. It is also a good idea to check the messages you receive from your Facebook friends through another communication channel such as email or phone.
Read more in our Facebook protective guide of identity theft guide and protection services against identity theft.