 |
| Researchers found that hackers hacked 100,000 Facebook accounts |
Security researchers found that cyber criminals exposed the database to uncover a global attack that resulted in the infiltration of Facebook accounts that were used to deceive others.
After researchers discovered an insecure database where fraudsters store the usernames and passwords of at least 100,000 victims, they discovered massive scams against Facebook users around the world.
The researcher said: The cyber criminals behind the fraud are deceiving Facebook victims to use a tool that claims whoever accesses their personal information by providing credentials to their accounts.
"After that" the fraudster uses the stolen credentials to share unnecessary comments on Facebook posts about the victim's account to direct people on the fraudulent website, researchers at information security firm vpnMentor said. Internet. And all of these sites eventually resulted in a fake Bitcoin trading platform that once tricked people into getting a deposit of at least $ 250. ''
The researchers said: They have no evidence of any other malicious party accessing or exposing the data.
The insecure Elasticsearch database contains around 5.5 GB of data which contains 13,521,774 records from at least 100,000 Facebook users. The database was open from June to September this year, and it was discovered on September 21, and closed on September 22.
The data in the exposed database includes login information, IP addresses and comment text that scammers can post to Facebook pages via infected accounts in order to refer people to suspicious and deceptive sites and data. PII (Personal Data), such as for example: email and name. And the phone number of the victim who was defrauded to obtain the Bitcoin.
To ensure the database's activity and reliability, the researchers said, they entered the wrong credentials to log into the fraudulent website and verified their registration.