Saturday, June 6, 2015

UnfriendAlert can steal Facebook Credentials.


              Facebook became a social status for many users. Many users spent hours in Facebook especially teens and many get addicted to them. The curiosity leads to many damage. Recently a malicious app has been identified that steals the user password from Facebook.

               Many users are curious to know Who visited my profile ? Who Unfriend me ?. On top of these the most curious thing is getting likes. Many feel sad when they get low number of likes as if the likes are going to fetch them money. 

                In addition to the above questions many need features that are not even provided by the Facebook itself. This curiosity makes the user to go for third party applications and there starts the hack.

                From the name itself it is stated that it is THIRD PARTY APP, there is a application called #UnfriendAlert that has been used by many users to get notified when any unfriend them.

                This application needs the user to login with their password and user account name of the Facebook with their credentials. After activation it will monitor the account and notify if anyone unfriend them.

                 Once the user enters his / her credentials it will be sent to the website named "#yougotunfriended.com" which is owned by the attacker. The main reason for the popularity of the app is that it is FREE.

                   As stated in many posts, don't reveal any credentials to the third party applications including Desktop softwares. In these days, computers can not be cheated but the user can be cheated very easily. #Social Engineering is the deadliest attack vector.

                    Users who are running this application are recommended to uninstall the application right away and they should change the password of the Facebook account. Make sure you change the password in all the services where the same user name and password has been used.

P.S : The post is to create awareness and not to create any negative impact.

No comments:

Post a Comment