Attackers Re-create An Entire Facebook Site For Phishing
ID: 82db50a7-eb69-5331-a07a-f2ce4d133c9a
STIX ID: report--82db50a7-eb69-5331-a07a-f2ce4d133c9a
Feed Name: Zscaler Security Research Blog
A well-crafted Facebook phishing campaign was discovered using cloned pages (login, sign-up, About, Developers, Advertising, etc.) replicated in all 64 languages and hosted on Russian domains (fersos.ru and baksko.ru). The sites closely mimic Facebook's UI and were not yet listed in PhishTank or blocked by Google Safe Browsing, making them effective and notable IOCs for detection and takedown.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.