A new Farmville-Facebook-PayPal triple combo phishing scam

fw1

ESET Ireland warns of a phishing scam targeting Irish FarmVille players.

Farmville was once the most played game on Facebook, with over 80 million players worldwide, but although its popularity has declined significantly since then, it still has over 30 million followers. So, it’s not at all surprising that cybercriminals have chosen this group as their phishing target.

It all starts with an email, claiming to come from PayPal and claiming a $82.04 GBP (whatever currency that is?) payment is being processed to FarmVille on Facebook. The full email states:

Your $82.04 GBP payment made for the game FarmVille on Facebook Inc. is being processed.

Because of our geographic detector recorded this payment as being made from an unknown ip we had to put the payment on hold.

If you did not authorize this payment and you want to cancel, please login and complete the form requested.

http://paypalcancelationform.co.uk/complete&return

Thank you for your understanding.

PayPal, Protection Department.

fw2

But the link leads to a forged PayPal website with a Brazilian address, which first asks you to log in,

fw3

but then claims your account has been frozen due to fraudulent activity being detected, further asking you to continue to the “Resolution Center” for the identification process, so that your “refund” can be resolved.

fw4

The “Resolution Center” is a phishing page, where all the details about the victim must be entered, including bank account and credit card info.

FW5.png

After handing all their details to the scammers, the victims are assured that the refund claim has been submitted and the Farmville payment has been refunded (but will not appear in your payments history).

fw6

Because FarmVille players were familiar with in-game financial transactions, payable with real-world money, many of them would be inclined to investigate the rather large sum claimed in the email and click on the provided fraudulent link.

ESET Ireland advises anyone receiving this email, to flag it as spam and avoid clicking any links or attachments in such emails.

by Ciaran McHale and Urban Schrott, ESET Ireland

 

 


One thought on “A new Farmville-Facebook-PayPal triple combo phishing scam

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s