Protect yourself: Here’s how to spot the malicious 'I can't believe he's gone' Facebook scam

Scams are becoming increasingly sophisticated, and the latest one to hit Facebook users is no exception.

Cybersecurity experts have issued an urgent warning about a new scam they've dubbed the 'I can't believe he's gone' scam.

This emotionally manipulative scam tricks users into downloading malware, using posts that feature fake BBC branding and imply that a loved one has passed away.



The scam was first brought to light by Cybersecurity Researcher Pieter Arntz from Malwarebytes.

It involves a post containing some variation of 'I can't believe he's gone. I'll miss him so much.' and a link.


SDC 1.png
A new type of scam is spreading across Facebook. Image source: Freepik.


Clicking on the link will take users to another Facebook post that appears to be a BBC News article about a fatal road accident.

However, this is not a legitimate link but a fake one leading to a malicious website.



'The BBC News logo in the picture and the BBCNEWS part of the URL are obviously intended to gain your trust and suggest that it's safe to play the video,' Mr Arntz explained.

'In reality, you will be redirected to the link displayed directly below the video.'

Following the link will take you through several redirects designed to perform 'fingerprinting'—where sites gather information about your browser, location, and history so they can redirect you to a website that’s most likely to generate profit from you.

You will eventually be redirected to a popup-filled website that may direct you to malicious websites and lead you to download malicious software and possibly unwanted programs.

According to cybersecurity experts, this type of scam is particularly dangerous because it is designed to gain your trust.

Hackers will hijack accounts and post on social media using these accounts, making it seem like they were posted by someone the potential victim trusts.



One user shared on social media how their aunt's Facebook account had been compromised and was now posting hundreds of 'I can't believe he's gone' posts.

'As you are made to believe it's a friend posting the news, you are caught off guard and less likely to question the authenticity of the seemingly tragic news,' Marijus Briedis, Cybersecurity Expert at NordVPN, said.

'By doing so, the scammers are also able to successfully get around Facebook's spam filters.'

BBC has issued a response, saying, 'We urge everyone to check links and URLs to ensure they are getting news from a trusted source. When we become aware of fake BBC content, we take swift action.'



To avoid falling victim to this scam, Mr Briedis recommend several steps.

If you see a post containing alarming news, he advised users to reach out to the person making the post rather than following the link.

'Approach the friend involved through other means to confirm the post's authenticity. Watch out for any unusual details in account profiles, as they may signal a compromised account,' he said.

He also reminded users to be wary of any post that seems to be engineering a sense of urgency.

If you think the post might be legitimate, look for other news sources or search for the event yourself rather than following the link directly.

He also encouraged careful scrutiny of the URL of any post that you want to follow.

If the URL isn't for the website it claims to be, then there is something dodgy going on.

Finally, he advised to keep browsers up to date and to stay informed about the latest scams.
Key Takeaways
  • Cybersecurity experts have issued a warning about a new Facebook scam named the 'I can't believe he's gone' scam, which leads to malware downloads.
  • The scam uses fake news articles and falsely branded BBC content to manipulate emotions and garner clicks from users.
  • Users are advised to verify the authenticity of alarming posts and to be cautious of the URL before clicking, reaching out to the poster through other means to confirm the legitimacy of the news.
Members, have you seen any of these posts on social media? Share your experiences and tips on how to stay safe from scams with us in the comments below.
 
Sponsored
Scams are becoming increasingly sophisticated, and the latest one to hit Facebook users is no exception.

Cybersecurity experts have issued an urgent warning about a new scam they've dubbed the 'I can't believe he's gone' scam.

This emotionally manipulative scam tricks users into downloading malware, using posts that feature fake BBC branding and imply that a loved one has passed away.



The scam was first brought to light by Cybersecurity Researcher Pieter Arntz from Malwarebytes.

It involves a post containing some variation of 'I can't believe he's gone. I'll miss him so much.' and a link.


View attachment 39770
A new type of scam is spreading across Facebook. Image source: Freepik.


Clicking on the link will take users to another Facebook post that appears to be a BBC News article about a fatal road accident.

However, this is not a legitimate link but a fake one leading to a malicious website.



'The BBC News logo in the picture and the BBCNEWS part of the URL are obviously intended to gain your trust and suggest that it's safe to play the video,' Mr Arntz explained.

'In reality, you will be redirected to the link displayed directly below the video.'

Following the link will take you through several redirects designed to perform 'fingerprinting'—where sites gather information about your browser, location, and history so they can redirect you to a website that’s most likely to generate profit from you.

You will eventually be redirected to a popup-filled website that may direct you to malicious websites and lead you to download malicious software and possibly unwanted programs.

According to cybersecurity experts, this type of scam is particularly dangerous because it is designed to gain your trust.

Hackers will hijack accounts and post on social media using these accounts, making it seem like they were posted by someone the potential victim trusts.



One user shared on social media how their aunt's Facebook account had been compromised and was now posting hundreds of 'I can't believe he's gone' posts.

'As you are made to believe it's a friend posting the news, you are caught off guard and less likely to question the authenticity of the seemingly tragic news,' Marijus Briedis, Cybersecurity Expert at NordVPN, said.

'By doing so, the scammers are also able to successfully get around Facebook's spam filters.'

BBC has issued a response, saying, 'We urge everyone to check links and URLs to ensure they are getting news from a trusted source. When we become aware of fake BBC content, we take swift action.'



To avoid falling victim to this scam, Mr Briedis recommend several steps.

If you see a post containing alarming news, he advised users to reach out to the person making the post rather than following the link.

'Approach the friend involved through other means to confirm the post's authenticity. Watch out for any unusual details in account profiles, as they may signal a compromised account,' he said.

He also reminded users to be wary of any post that seems to be engineering a sense of urgency.

If you think the post might be legitimate, look for other news sources or search for the event yourself rather than following the link directly.

He also encouraged careful scrutiny of the URL of any post that you want to follow.

If the URL isn't for the website it claims to be, then there is something dodgy going on.

Finally, he advised to keep browsers up to date and to stay informed about the latest scams.
Key Takeaways

  • Cybersecurity experts have issued a warning about a new Facebook scam named the 'I can't believe he's gone' scam, which leads to malware downloads.
  • The scam uses fake news articles and falsely branded BBC content to manipulate emotions and garner clicks from users.
  • Users are advised to verify the authenticity of alarming posts and to be cautious of the URL before clicking, reaching out to the poster through other means to confirm the legitimacy of the news.
Members, have you seen any of these posts on social media? Share your experiences and tips on how to stay safe from scams with us in the comments below.
There is another scam on Facebook at the moment. The're advertising a Dyson vacuum cleaner for $5, the scammer's are from Check Republic.
 
I often see ads on the Microsoft news page when I go to the internet on my computer. I believe a lot of this is fake news. e.g. David Koch advising how he has made millions and the same with other known people. Also, this is on Facebook where at the moment we get sad news about Keith Urban. Dont know if it is true but surely he would not be
telling everyone his personal news. I just leave them alone but have often wondered about these news items.
 
Scams are becoming increasingly sophisticated, and the latest one to hit Facebook users is no exception.

Cybersecurity experts have issued an urgent warning about a new scam they've dubbed the 'I can't believe he's gone' scam.

This emotionally manipulative scam tricks users into downloading malware, using posts that feature fake BBC branding and imply that a loved one has passed away.



The scam was first brought to light by Cybersecurity Researcher Pieter Arntz from Malwarebytes.

It involves a post containing some variation of 'I can't believe he's gone. I'll miss him so much.' and a link.


View attachment 39770
A new type of scam is spreading across Facebook. Image source: Freepik.


Clicking on the link will take users to another Facebook post that appears to be a BBC News article about a fatal road accident.

However, this is not a legitimate link but a fake one leading to a malicious website.



'The BBC News logo in the picture and the BBCNEWS part of the URL are obviously intended to gain your trust and suggest that it's safe to play the video,' Mr Arntz explained.

'In reality, you will be redirected to the link displayed directly below the video.'

Following the link will take you through several redirects designed to perform 'fingerprinting'—where sites gather information about your browser, location, and history so they can redirect you to a website that’s most likely to generate profit from you.

You will eventually be redirected to a popup-filled website that may direct you to malicious websites and lead you to download malicious software and possibly unwanted programs.

According to cybersecurity experts, this type of scam is particularly dangerous because it is designed to gain your trust.

Hackers will hijack accounts and post on social media using these accounts, making it seem like they were posted by someone the potential victim trusts.



One user shared on social media how their aunt's Facebook account had been compromised and was now posting hundreds of 'I can't believe he's gone' posts.

'As you are made to believe it's a friend posting the news, you are caught off guard and less likely to question the authenticity of the seemingly tragic news,' Marijus Briedis, Cybersecurity Expert at NordVPN, said.

'By doing so, the scammers are also able to successfully get around Facebook's spam filters.'

BBC has issued a response, saying, 'We urge everyone to check links and URLs to ensure they are getting news from a trusted source. When we become aware of fake BBC content, we take swift action.'



To avoid falling victim to this scam, Mr Briedis recommend several steps.

If you see a post containing alarming news, he advised users to reach out to the person making the post rather than following the link.

'Approach the friend involved through other means to confirm the post's authenticity. Watch out for any unusual details in account profiles, as they may signal a compromised account,' he said.

He also reminded users to be wary of any post that seems to be engineering a sense of urgency.

If you think the post might be legitimate, look for other news sources or search for the event yourself rather than following the link directly.

He also encouraged careful scrutiny of the URL of any post that you want to follow.

If the URL isn't for the website it claims to be, then there is something dodgy going on.

Finally, he advised to keep browsers up to date and to stay informed about the latest scams.
Key Takeaways

  • Cybersecurity experts have issued a warning about a new Facebook scam named the 'I can't believe he's gone' scam, which leads to malware downloads.
  • The scam uses fake news articles and falsely branded BBC content to manipulate emotions and garner clicks from users.
  • Users are advised to verify the authenticity of alarming posts and to be cautious of the URL before clicking, reaching out to the poster through other means to confirm the legitimacy of the news.
Members, have you seen any of these posts on social media? Share your experiences and tips on how to stay safe from scams with us in the comments below.
Imo FB itself is a scam, posing as a social media connection fraught with traps for the unsuspecting.
 
There is a scam for Bunnings advertising Makita for $5.00 online purchases.
 

Join the conversation

News, deals, games, and bargains for Aussies over 60. From everyday expenses like groceries and eating out, to electronics, fashion and travel, the club is all about helping you make your money go further.

Seniors Discount Club

The SDC searches for the best deals, discounts, and bargains for Aussies over 60. From everyday expenses like groceries and eating out, to electronics, fashion and travel, the club is all about helping you make your money go further.
  1. New members
  2. Jokes & fun
  3. Photography
  4. Nostalgia / Yesterday's Australia
  5. Food and Lifestyle
  6. Money Saving Hacks
  7. Offtopic / Everything else

Latest Articles

  • We believe that retirement should be a time to relax and enjoy life, not worry about money. That's why we're here to help our members make the most of their retirement years. If you're over 60 and looking for ways to save money, connect with others, and have a laugh, we’d love to have you aboard.
  • Advertise with us

User Menu

Enjoyed Reading our Story?

  • Share this forum to your loved ones.
Change Weather Postcode×
Change Petrol Postcode×