Feeds

Facebook spams social networkers with phishy email

Click on this link...bitch

  • alert
  • submit to reddit

Build a business case: developing custom apps

Facebook has taken the unusual step of sending its users email asking them to click on a link so they can restore site configuration settings that were recently lost. Facebook isn't kidding, and neither are we.

"Unfortunately, the settings that control which email notifications get sent to you were lost," the email says. "We're sorry for the inconvenience. To reset your email notification settings, go to http://www.facebook.com/editaccount.php?notifications."

The wording sounds like so many phishing emails we've all received over the years. Even Aunt Mildred would feel proud of herself for spotting the ruse. Except it's not, and that's unfortunate because it threatens to desensitize newbies to the ever-present dangers of phishing attacks.

The move, because it flies in the face of everything security experts advise against, took some Facebook users by surprise.

"I'm amazed to see a large organisation like that sending something that looks so obviously evil," wrote Reg reader Kevin Lentin, who first brought our attention to the emails. "It would have been better to send an email saying 'please go to our website and login.'"

That's because Facebook is one bigger targets of phishers. With all the scammers eager to trick users into clicking on dodgy links, you'd think Facebook's security team would bend over backwards to educate their users to steer clear of them in emails, no matter where they appear to come from.

Not that Facebook is alone. Earlier this week, an eBay spokesman counseled users of the online auction house to never click on links embedded in emails, even though the eBay-owned PayPal continues to include links to its login page in emails it sends to users. As if this do-as-I-say-not-as-I-do advice wasn't bad enough, PayPal was found directing users to the wrong website. ®

The essential guide to IT transformation

More from The Register

next story
Rupert Murdoch says Google is worse than the NSA
Mr Burns vs. The Chocolate Factory, round three!
Microsoft cries UNINSTALL in the wake of Blue Screens of Death™
Cache crash causes contained choloric calamity
Germany 'accidentally' snooped on John Kerry and Hillary Clinton
Dragnet surveillance picks up EVERYTHING, USA, m'kay?
Know what Ferguson city needs right now? It's not Anonymous doxing random people
U-turn on vow to identify killer cop after fingering wrong bloke
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
Who needs hackers? 'Password1' opens a third of all biz doors
GPU-powered pen test yields more bad news about defences and passwords
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
prev story

Whitepapers

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Solving today's distributed Big Data backup challenges
Enable IT efficiency and allow a firm to access and reuse corporate information for competitive advantage, ultimately changing business outcomes.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.