Skip to content
Best Practice
  • Best Practice Biz | About
  • Best Practice Biz | Contact
  • Best Practice Biz | Gap Analysis Thank You
  • Best Practice Biz | Guides
  • Best Practice Biz | News
  • Best Practice Biz | People and Culture
  • Best Practice Biz | Services
  • Best Practice Biz | Thank You
  • Best Practice Biz | Thank You For Registering
  • Best Practice Biz | Thank You For Subscribing
  • Best Practice Biz | Videos
  • Best Practice Certification | Adwords
  • Best Practice Certification | Agriculture
  • Best Practice Certification | Architecture
  • Best Practice Certification | Benefits of Certification
  • Best Practice Certification | Calculator
  • Best Practice Certification | Calculator Form
  • Best Practice Certification | Calculator Pricing
  • Best Practice Certification | Certification Process
  • Best Practice Certification | Construction
  • Best Practice Certification | Contact
  • Best Practice Certification | Cyber Security Assessment
  • Best Practice Certification | E-Auditing
  • Best Practice Certification | E-commerce
  • Best Practice Certification | Electrical
  • Best Practice Certification | Essential 8 Gap Analysis
  • Best Practice Certification | Frequently Asked Questions
  • Best Practice Certification | Gap Analysis Checklist
  • Best Practice Certification | Glossary of Terms
  • Best Practice Certification | Healthcare
  • Best Practice Certification | Homepage
  • Best Practice Certification | Hospitality
  • Best Practice Certification | Human Services
  • Best Practice Certification | ISO 14001 Environmental Management System
  • Best Practice Certification | ISO 14001 Environmental Management System | Google Adwords
  • Best Practice Certification | ISO 14001 Gap Analysis Checklist | Adwords
  • Best Practice Certification | ISO 27001 Gap Analysis Checklist | Adwords
  • Best Practice Certification | ISO 27001 Information Security Management System
  • Best Practice Certification | ISO 27001 Information Security Management System | Google Ads
  • Best Practice Certification | ISO 27001 Information Security Management System | Google Ads 2
  • Best Practice Certification | ISO 45001 Gap Analysis Checklist | Adwords
  • Best Practice Certification | ISO 45001 Safety Management System
  • Best Practice Certification | ISO 45001 Safety Management System | Google Adwords
  • Best Practice Certification | ISO 55001 Asset Management System
  • Best Practice Certification | ISO 9001 Gap Analysis Checklist | Adwords
  • Best Practice Certification | ISO 9001 Quality Management System
  • Best Practice Certification | ISO 9001 Quality Management System | Google Ads
  • Best Practice Certification | ISO 9001 Quality Management System | Google Ads 2
  • Best Practice Certification | ISO Stickers
  • Best Practice Certification | Local Government
  • Best Practice Certification | Manufacturing
  • Best Practice Certification | Plumbing
  • Best Practice Certification | Software
  • Best Practice Certification | Telecommunications
  • Best Practice Certification | Transfer Your Certification
  • Best Practice Certification | Transport & Logistics
  • Best Practice Certification | Webinars
  • Best Practice Recruitment | About
  • Best Practice Recruitment | Blog
  • Best Practice Recruitment | Candidates
  • Best Practice Recruitment | Contact
  • Best Practice Recruitment | Current Opportunities
  • Best Practice Recruitment | Employers
  • Best Practice Recruitment | Google Ads
  • Best Practice Recruitment | Homepage
  • Best Practice Recruitment | Position Enquiry
  • Best Practice Recruitment | PXT Select
  • Best Practice Recruitment | Resources
  • Best Practice Recruitment | Thank You
  • Legal Information
  • Privacy Policy
  • Best Practice Biz | Homepage
  • Best Practice Biz
    • +61 1300 402 602
    • info@bestpractice.biz
    • Home
    • Newsfeed
      • View All
      • News
      • Business
      • Personal Development
      • Professional Development
      • Talent Acquisition
      • Quality Management
      • Environmental Management
      • Information Security
      • OH&S Management
      • Asset Management
      • ISO for Industry
    • Videos
    • Guides
    • About
      • Who We Are
      • Sustainabilty Promise
      • Join Us
    • Solutions
      • ISO Certification
      • Online ISO Training
      • Recruitment
    • Contact
    Menu
    • Home
    • Newsfeed
      • View All
      • News
      • Business
      • Personal Development
      • Professional Development
      • Talent Acquisition
      • Quality Management
      • Environmental Management
      • Information Security
      • OH&S Management
      • Asset Management
      • ISO for Industry
    • Videos
    • Guides
    • About
      • Who We Are
      • Sustainabilty Promise
      • Join Us
    • Solutions
      • ISO Certification
      • Online ISO Training
      • Recruitment
    • Contact

    Facebook Scam Exploiting 13 Million Records Exposed

    • November 17, 2020
    Facebook Scam Exploiting 13 Million Records Exposed

    A Facebook scam exploiting more than 13 million records has been exposed by cyber security researchers who said that hundreds of thousands of Facebook users have fallen victim to the scam. 

    The news comes from researchers at vpnMentor who say they discovered a database containing 5.5GB of personal information, including names, phone numbers, usernames and even password information stored on an unsecured server. 

    The researchers were able to access the server and discover the personal information of more than 200,000 Facebook users that they believe had been duped by a Bitcoin or cryptocurrency scam posted on Facebook. They have published their findings in a blog post detailing the fact that the Facebook scam had been successfully exploiting 13 million records, which was exposed by their work.  

    According to a report from InfoSecurity Magazine “the two datasets are part of the same operation: the first group were tricked into handing over their account log-ins by a fake app promising to reveal who had recently visited their profile. With these log-ins, the scammers hijacked the victims’ accounts and posted comments on their Facebook posts, with links directing individuals to a Bitcoin fraud scheme.” 

    The researchers at vpnMentor say that in total, there were more than 13.5 million records stored on the database. They were able to discover the treasure trove of information after “the fraudsters left the database used to harvest and store their victims’ details completely open for anyone to view and access.”

    “With this information, we were able to expose their operation,” writes vpnMentor. 

    Just a day after the firm discovered the database that exposed the scam exploiting more than 13 million Facebook records, the database was deleted. “New data immediately started to appear again before those in charge finally secured the server,” reports state.  

    Get Your Free Gap Analysis Checklist

    Some analysts are concerned that the database is just one part of a much larger scheme to compromise the log-in details of Facebook users for later attempts at accessing their emails, and even financial information. 

    This is due to the well-established fact that people reuse their passwords across multiple log-ins for their personal, profession and financial accounts. 

    “With access to users’ Facebook accounts, the cyber-criminals behind this campaign have a highly monetizable resource for posting malicious links to scams, launching follow-on phishing or identity fraud attempts, blackmail and credential stuffing of other accounts,” writes Phil Muncaster. 

    VpnMentor has said in a statement that “if you’re a Facebook user and think you’ve been the victim of this fraud, change your login credentials immediately. Furthermore, if you reused your Facebook password on any other accounts, change it immediately to protect them from hacking.” 

    “We recommend using a password generator to create unique, strong passwords for every private account you have, and changing them periodically. Never provide usernames and passwords for Facebook, email or financial accounts to external websites,” they said.

    The news is particularly important due to the fact that the threat environment online is continually evolving, and hackers are always looking for new avenues to take advantage of internet users that are not aware of the best practices while browsing. 

    For more information on how you can reduce the risk of a data breach in your personal life, or mitigate the chances of a cyber attack on your organisation – particularly if you’re working remotely – click here for our guide to reducing the risk of information and data breaches.

    Five Cyber Security Best Practices For Your Organisation
    Protect Privacy & Build Digital Trust with ISO 27001
    What are the Benefits of Being Certified to ISO 27001?
    What is ISO 27001, and Why Is Information Security Important?
    What is ISO 27017 & Why is it Important?
    What is ISO 45001, and Why is it Important?
    What is ISO 14001 & Why is it Important?

     

    What are the Benefits of ISO 9001:2015?

    Subscribe to our Newsletter

    BPC_Newsletter_Form

    This field is for validation purposes and should be left unchanged.

    Share This Post With Your Network

    More To Discover

    3 Leadership Mistakes That Make Employees Quit
    Quality Management

    What’s the Difference Between ISO 9000 & 9001?

    Read More »
    March 28, 2023
    Quality Management

    How Do You Write An ISO 9001 Procedure

    Read More »
    March 24, 2023
    Environmental Management

    What is Risk And Opportunities in ISO 14001

    Read More »
    March 23, 2023

    Copyright 2023 © Best Practice Certification Pty Ltd

    Linkedin Youtube Instagram Twitter Facebook Spotify

    Get Started

    • About
    • Newsfeed
    • Videos
    • Guides

    Our Services

    • Online Training
    • Recruitment
    • ISO Certification

    Contact & Policies

    • Privacy Policy
    • Legal Information
    • +61 1300 402 602
    • info@bestpractice.biz
     

    Loading Comments...