Stephane Hamel
Digital marketing & analytics shaped by data governance, privacy and ethics | Educator · Speaker · Consultant
Follow me
May 9, 2023
Today, I encountered another sophisticated #phishing attempt clearly targeting businesses. It appeared to be an email from #Meta, claiming my #Facebook page would be deleted due to a compliance issue (without specifying which FB page!)
🔴 Here's what you should look out for:
In the email:
❗ The sender falsely claims to be from SalesForce (sneaky!);
❗ All links are disabled, except for the "Disagree with decision" button;
❗ The logo is Facebook's, not Meta's;
❗ The subject and tone create a sense of urgency to push you to act.
On the fake website:
❗ The domain is suspicious; a "whois" search shows it's registered in Cameroon and not owned by Meta;
❗ Only the Submit button is functional;
❗ It requests information that Meta should already have: email, phone, FB page.
After submission:
❗ A deceptive delay appears as it "submits your appeal";
❗ It then asks for your OTP;
❗ If you fall for it, you'll see an endless "Please wait" message, buying time for the scammers to log into your real account!
❗ Some versions may also ask for your password or credit card info "for validation."
And voilà! You are f*cked! ☠
May 9, 2023