Protect yourself: Here’s how to spot the malicious 'I can't believe he's gone' Facebook scam
By
VanessaC
- Replies 4
Scams are becoming increasingly sophisticated, and the latest one to hit Facebook users is no exception.
Cybersecurity experts have issued an urgent warning about a new scam they've dubbed the 'I can't believe he's gone' scam.
This emotionally manipulative scam tricks users into downloading malware, using posts that feature fake BBC branding and imply that a loved one has passed away.
The scam was first brought to light by Cybersecurity Researcher Pieter Arntz from Malwarebytes.
It involves a post containing some variation of 'I can't believe he's gone. I'll miss him so much.' and a link.
Clicking on the link will take users to another Facebook post that appears to be a BBC News article about a fatal road accident.
However, this is not a legitimate link but a fake one leading to a malicious website.
'The BBC News logo in the picture and the BBCNEWS part of the URL are obviously intended to gain your trust and suggest that it's safe to play the video,' Mr Arntz explained.
'In reality, you will be redirected to the link displayed directly below the video.'
Following the link will take you through several redirects designed to perform 'fingerprinting'—where sites gather information about your browser, location, and history so they can redirect you to a website that’s most likely to generate profit from you.
You will eventually be redirected to a popup-filled website that may direct you to malicious websites and lead you to download malicious software and possibly unwanted programs.
According to cybersecurity experts, this type of scam is particularly dangerous because it is designed to gain your trust.
Hackers will hijack accounts and post on social media using these accounts, making it seem like they were posted by someone the potential victim trusts.
One user shared on social media how their aunt's Facebook account had been compromised and was now posting hundreds of 'I can't believe he's gone' posts.
'As you are made to believe it's a friend posting the news, you are caught off guard and less likely to question the authenticity of the seemingly tragic news,' Marijus Briedis, Cybersecurity Expert at NordVPN, said.
'By doing so, the scammers are also able to successfully get around Facebook's spam filters.'
BBC has issued a response, saying, 'We urge everyone to check links and URLs to ensure they are getting news from a trusted source. When we become aware of fake BBC content, we take swift action.'
To avoid falling victim to this scam, Mr Briedis recommend several steps.
If you see a post containing alarming news, he advised users to reach out to the person making the post rather than following the link.
'Approach the friend involved through other means to confirm the post's authenticity. Watch out for any unusual details in account profiles, as they may signal a compromised account,' he said.
He also reminded users to be wary of any post that seems to be engineering a sense of urgency.
If you think the post might be legitimate, look for other news sources or search for the event yourself rather than following the link directly.
He also encouraged careful scrutiny of the URL of any post that you want to follow.
If the URL isn't for the website it claims to be, then there is something dodgy going on.
Finally, he advised to keep browsers up to date and to stay informed about the latest scams.
Members, have you seen any of these posts on social media? Share your experiences and tips on how to stay safe from scams with us in the comments below.
Cybersecurity experts have issued an urgent warning about a new scam they've dubbed the 'I can't believe he's gone' scam.
This emotionally manipulative scam tricks users into downloading malware, using posts that feature fake BBC branding and imply that a loved one has passed away.
The scam was first brought to light by Cybersecurity Researcher Pieter Arntz from Malwarebytes.
It involves a post containing some variation of 'I can't believe he's gone. I'll miss him so much.' and a link.
Clicking on the link will take users to another Facebook post that appears to be a BBC News article about a fatal road accident.
However, this is not a legitimate link but a fake one leading to a malicious website.
'The BBC News logo in the picture and the BBCNEWS part of the URL are obviously intended to gain your trust and suggest that it's safe to play the video,' Mr Arntz explained.
'In reality, you will be redirected to the link displayed directly below the video.'
Following the link will take you through several redirects designed to perform 'fingerprinting'—where sites gather information about your browser, location, and history so they can redirect you to a website that’s most likely to generate profit from you.
You will eventually be redirected to a popup-filled website that may direct you to malicious websites and lead you to download malicious software and possibly unwanted programs.
According to cybersecurity experts, this type of scam is particularly dangerous because it is designed to gain your trust.
Hackers will hijack accounts and post on social media using these accounts, making it seem like they were posted by someone the potential victim trusts.
One user shared on social media how their aunt's Facebook account had been compromised and was now posting hundreds of 'I can't believe he's gone' posts.
'As you are made to believe it's a friend posting the news, you are caught off guard and less likely to question the authenticity of the seemingly tragic news,' Marijus Briedis, Cybersecurity Expert at NordVPN, said.
'By doing so, the scammers are also able to successfully get around Facebook's spam filters.'
BBC has issued a response, saying, 'We urge everyone to check links and URLs to ensure they are getting news from a trusted source. When we become aware of fake BBC content, we take swift action.'
To avoid falling victim to this scam, Mr Briedis recommend several steps.
If you see a post containing alarming news, he advised users to reach out to the person making the post rather than following the link.
'Approach the friend involved through other means to confirm the post's authenticity. Watch out for any unusual details in account profiles, as they may signal a compromised account,' he said.
He also reminded users to be wary of any post that seems to be engineering a sense of urgency.
If you think the post might be legitimate, look for other news sources or search for the event yourself rather than following the link directly.
He also encouraged careful scrutiny of the URL of any post that you want to follow.
If the URL isn't for the website it claims to be, then there is something dodgy going on.
Finally, he advised to keep browsers up to date and to stay informed about the latest scams.
Key Takeaways
- Cybersecurity experts have issued a warning about a new Facebook scam named the 'I can't believe he's gone' scam, which leads to malware downloads.
- The scam uses fake news articles and falsely branded BBC content to manipulate emotions and garner clicks from users.
- Users are advised to verify the authenticity of alarming posts and to be cautious of the URL before clicking, reaching out to the poster through other means to confirm the legitimacy of the news.