Attention March 13th, 2024 Webinar Attendees, please click here to complete our Survey or Attendance Verification and Credit Request Form. (required for CLE credit)

Facebook Phishing Scam Takes New Twist

Last update





Print Friendly, PDF & Email
Watch for bogus "account verification" emails.

A new twist to an old phishing scam is stealing login credentials from Facebook users. The scam doesn’t link to a fake logon page, like similar Facebook phishing expeditions. This scam takes you to a bogus “customer support” site. For more details, here is an article from Stu Sjouwerman, CEO of the security awareness firm KnowBe4.

By Stu Sjouwerman

“Rather than take the usual path of sending an email and linking to a spoofed logon page, this attack takes a different set of actions that at first make no sense but may actually be brilliant.

So, you get an email that seemingly looks like every phishing email you’ve received – pretty bland and simple, but with a message that those not in IT could fall for:

Now, you’re probably thinking that there’s a link to a look-alike Facebook page so threat actors can steal your credentials, right?

In this case you’re wrong. Security researchers at Malwarebytes have uncovered a multi-stage scam that starts with an email like the one above, but the link provided opens a new pre-filled email using a mailto: link to begin a dialog with a “customer support” person of some type.

Read “Simple Facebook Phishing Scam Takes Unexpected Turn” on the KnowBe4 website.

Why choose Alta Pro Lawyers Risk Purchasing Group over other legal malpractice programs? Because Alta Pro RPG gives insured law firms exclusive access to valuable practice resources and cost-saving programs. When you join the Alta Pro RPG, you can use our Pro Practice Resource Center, filled with practical pointers and risk management tools to keep your law firm safe and soaring. Plus you get exclusive access to free CLE webinars, like our recent, highly popular program on Basics of Cannabis Law. Also: discounts on office essentials, Ask the Risk Pro, malpractice defense hotline and more. Don’t miss out on these fantastic perks. If you’re already a policyholder with Alta Pro but haven’t yet created your RPG account, here’s how to do it.

At first glance, this seems like a really dumb step. But when you think about how the “email-to-logon page” method has been overdone, this may actually be an unexpected twist that may actually increase credibility. The emails contain the usual “good enough to pass a cursory glance” test, and the assumption is eventually the customer service person will ask for the victims credentials, or perhaps credit card details, etc.

So, is this dumb or brilliant? Time will tell.”

KnowBe4 Social Media Phishing Test

Don’t get hacked by social media phishing attacks!

Many of your users are active on Facebook, LinkedIn, and Twitter. Cybercriminals use these platforms to scrape profile information of your users and organization to create targeted spear phishing campaigns in an attempt to hijack accounts, damage your organization’s reputation, or gain access to your network.

KnowBe4’s Social Media Phishing Testis a complimentary IT security tool that helps you identify which users in your organization are vulnerable to these types of phishing attacks that could put your users and organization at risk.

Here’s how the Social Media Phishing Test works:

  • Immediately start your test with your choice of three social media phishing templates
  • Choose the corresponding landing page your users see after they click
  • Show users which red flags they missed or sendthem to a fake login page
  • Get a PDF emailed to you in 24 hours with your percentage of clicks and data entered


Do you practice in Wisconsin, Texas, Minnesota, Ohio, Illinois, Indiana or Michigan? Is your professional liability coverage managed through Alta Pro Insurance? If so, you are automatically a member of the Alta Pro Lawyers RPG. All you need to do is sign up to start enjoying benefits like cash discounts on Clio practice management products, free CLE webinars, the Pro Practice Playbook, Reminger ProLink, Ask the Risk Pro and more. Here’s how to join.


Print Friendly, PDF & Email

Related Posts on!

Alta Pro Logo Icon

About the Editorial Staff

In an age of consolidation where increasingly impersonal transactions have made customer service an oxymoron, we bring together independent agents, insurance companies, and other industry specific service providers to develop and deliver insurance products and risk management solutions that benefit our insurance customers.

May 22, 2024 1:00 pm EST
1.0 Regular Credit
June 12, 2024 1:00 pm EST
1.0 Ethics Credit

Join Our Newsletter

Occasional newsletters and CLE invites

Find Us on Social

Upcoming CLE Webinar: Essential Business Skills for Busy Lawyers Part 1 – Communicate Like A Pro

May 22, 2024 1:00 pm EST
CLE Credit: 1.0 Regular

Colleen L. Byers

Colleen Byers Mediation, LLC


Latest Videos

1 Hour

Creating an Attorney Compensation Plan That Will Build Firm Culture and Attract Top Talent

1 Hour

Ethical Uses of Generative AI in the Practice of Law

1 Hour

Four “Ds” of Client Relations: Dabbling, Documentation, Difficult Clients, Don’t Do it!

Need Help?

Visit our Frequently Asked Questions page. 

Or email us directly at

Or submit your issue in the comment form below and we will respond as soon as possible.