Posted By Alex | 12/30/2009 10:33:35 PMIf you just found this blog by visiting Chevtek.com then you weren't actually tricked. However, if you have suddenly found yourself on this page while trying to log into your Facebook profile then it is very important that you read on.You've just been tricked into giving out your Facebook information. Don't worry, your information hasn't been sent to anyone except for your own email to prove a point. How were you tricked? Well, you came across a page located at
www.dkoguild.com and you didn't pay attention to your address bar. Had you looked at your browser's address bar you would have known that you were not actually at
www.facebook.com. The page you were on was a fake. It was designed to look exactly like Facebook's login page and trick you into trying to log into your Facebook profile. After you clicked login your information could have gone anywhere we wanted it to and you would have had no idea.
If I was a bad guy I could have had your information sent to my own email inbox. I could have then logged into your Facebook profile and sent all your friends messages as if I were you. I could have tricked them into going to the same page you did and I could have stolen many of their usernames and passwords too. Once a thief has taken over your profile he could use it for all kinds of things, from advertising products to sending viruses to all of your friends; after all, your friends would never expect a virus to come from YOU right?
Always watch your address bar! If it doesn't say www.facebook.com, it's not Facebook. Period. The same goes for any websites you use on a regular basis. That fake Facebook page literally took ten minutes to make. I'm not joking. I put that up in under ten minutes and I could easily steal hundreds, even thousands of usernames and passwords before anyone even flagged it as a malicious site. Of course this one was designed to teach you a lesson and hopefully prevent you from getting your account hijacked in the future. An email has been sent to the email you provided as your username on the fake page. The email includes the email and password you entered on the fake page. I included those because I wanted to prove to you that your information could have been emailed anywhere I chose. Don't worry, the email was automated and it didn't go to anyone else. You don't have to change your password just because of this, but if you were tricked once then you could have been tricked in the past; you may want to change it anyway just to be on the safe side.
I hope you learned something new today and I wish you safe browsing in the future!
- Alex
0 Comment(s) on this blog.