Lots of spammers try to use fake Facebook notifications to trap the unwary. Here’s a sample of what’s landed in my spam folder. All but the last one used graphics that made them look like the came from Facebook.
Senders:
Facebook [update+fqqrnmjhudim@atse.org.au]
Facebook [update+dxyfrdccslte@csj.g12.br]
Facebook [updateV995O9DZ34L9@facebookmail.com]
Facebook [update+uIsYkDkEcuHyrBRXzixWMnatposl1@snik.be]
Facebook [update+YJAKHLlIWryYDRlsGSOvxkunDEpv1@fabioleonardi.it]
Facebook [welcome+robert@zamilglass.com]
Subjects:
Confirm your account on Facebook
You have notifications pending
Reminder: Joanna Gould invited you to join Facebook…
Reminder: Courtney Wilkins invited you to join Facebook…
Welcome to the Family Mall
Sample 1:
Hi robert@rlweiner.com,
You joined Facebook, but you still haven’t confirmed your account.
To confirm, simply follow this link:
http://www.facebook.com/n/?confirmemail.php&e=robert%40rlweiner.com&c=48182369&mid=D4CB33b1b9bDcd6715c2C2Cf26C4Bf62&code=48182369&n_m=robert%40rlweiner.com (in one case the link leads to http://bur-nak.com/tab/let/s/ and in another it leads to http://erpenpencere.com/tab/let/s/)
And that’s it! Once you do this, you’ll have access to all of Facebook’s features.
Important: After today, you’ll be unable to log in to your Facebook account until you complete this step.
You may be asked to enter this confirmation code: 48182369
Again, welcome!
Thanks,
The Facebook Team
Sample 2:
Hi,
Here’s some activity you may have missed on Facebook.
Adelyn HESS has posted statuses, photos and more on Facebook.
(link leads to http://assessoriacambrils.com/inmobiliaria/index.php?route=common/page5.htm?TXOJW7N=XPFHXFRJ&ZIUVBY=ZXFFBVPQBIASV0SU9G2AU&TWW=26CX5RF0F20VO&1KST4O4=A4OQRHFC06&EL8ND=7JL4QAGPQFUHFET92V&SSF=LN503LBH6DKT0ENN26UWZI&)
Sample 3:
Hi,
Here’s some activity you have missed on Facebook. No matter how far away you are from friends and family, Facebook can help you stay connected.
Other people have asked to be your friend on Facebook. Accept this invitation to see your previous friend requests
4 friend request (in one case the link points to http://cozydrycleaners.com/trace/a/b/c/d/ while another points to http://lingerieshoppy.co.uk/up/load/)
Sample 4:
This one makes no attempt other than the sender’s name to look like it has anything to do with Facebook:
Welcome to our Online Shop
Whether it’s a cold or flu in the winter, allergies in the spring, or taking care of yourself in the summer sun, we’ve got what you need.
You can now take part in the various services we have to offer you. Some of these services include:
Permanent Cart – Any products added to your online cart remain there until you remove them, or check them out.
Order History – View your history of purchases that you have made with us.
Explore Service Online (link leads to http://carettypeab.net/)
This email address was given to us by one of our customers:
robert@rlweiner.com
Robert says
I got a new batch this week. The senders were:
The subjects were:
The text was along the lines of:
Some said I’ve purged my Facebook account, some that I’d blocked it.
The link that claims to lead to facebook.com actually points to another site, presumably a malware delivery site.
Jerry Davis says
I received something similar to #2 above and now my entire Facebook account doesn’t exist.
Is there anything I can do about this?
Thanks,
Jerry Davis says
Can I get my FB pages, contacts, etc back?
Robert Weiner says
Jerry — Have you tried contacting Facebook?