Vingers.ru – Another Facebook Phishing Scam

So it seems that every other day a new Facebook phishing scheme springs to life. Or rather the same scam keeps showing up disguised in a new country domain. First it was the .at domain, a couple of days ago the .be domain and now it seems .ru is being targeted.

I just received a message from one of the friends that sent me the ”wwww whiteflash be” message, now with “Hello” as the subject and ”www vingers(enter dot)ru” as the message body. Again, the site looks like the Facebook login page to try and steal your user credentials. The good news for Google Chrome users is that the browser identifies the site as a malware sites and displays the corresponding warning. Can’t say the same about Firefox and Internet Explorer 7, though.

You should NOT provide your Facebook credentials to any site that is not http://www.facebook.com. You shouldn’t even blindly trust the browser address bar, and instead make sure you type the URL yourself. Take a look at this article that outlines the danger of having your Facebook credentials stolen.

Here’s a list of sites that are being used to conduct the attack:

• afoi.ru
• areps.at
• bests.at
• bestspace.be
• brunga.at
• goldbase.be
• greenbuddy.be
• indigoline.be
• kirgo.at
• mymarket.be
• nutpic.at
• picoband.be
• ponbon.im
• redbuddy.be
• redfriend.be
• silvertag.be
• simplemart.be
• sweeter.be
• vingers.ru
• whiteflash.be
• whitemart.be
• yospace.be

UPDATE: The vingers.ru site is returning a 404 Not Found error at the moment. I guess the scammers are changing domains faster now. I would expect a new one showing up soon.

UPDATE: Check this list of scam sites that I compiled and will be updating when some more sites show up.