Facebook Phishing Pages

This report documents a Facebook phishing campaign discovered on 2011-02-13: several newly-registered domains hosted identical fake Facebook login pages that collected user credentials and redirected victims to a Facebook profile/album page. The report lists the malicious domains and shows the phishing page behavior, noting that the page captured credentials but did not post them to Facebook on the user’s behalf.