Ah, Facebook Messenger. It’s where we swap memes, catch up on gossip, and reconnect with old classmates. Lurking behind that chat bubble is a new threat. It is a cleverly disguised scam by hackers aimed at both businesses and individuals on the platform. 

According to Guardio Labs’ researchers, every week, an overwhelming 100,000 phishing messages target Facebook users from North America all the way to Southeast Asia. If you're running a business, take note: 7% of Facebook Business accounts have been targeted, with a concerning 0.4% falling victim, downloading the harmful payload consisting of malicious malware. 

CLICK TO GET KURT’S FREE CYBERGUY NEWSLETTER WITH SECURITY ALERTS, QUICK TIPS, TECH REVIEWS AND EASY HOW-TO’S TO MAKE YOU SMARTER 

The art of digital deception 

Hackers are upping their game, using familiar faces and alarming tactics to lure you into their traps. They're cleverly impersonating the people who run the platform and sending out "copyright violation" alerts that seem pressing. 

If you run a Facebook Business, such alerts can create a moment of panic. And in that split second, you might accidentally click and download a seemingly innocent attachment.

Facebook messenger

Facebook messenger app on iPhone (Cyberguy.com)

Attachments with hidden dangers 

The real danger? That seemingly "innocent" attachment might not be so benign. There's a chance it could be laced with malware. In some cases, this malware can start a domino effect, potentially sourcing further malicious content.

ASK KURT: THE VITAL DISTINCTION BETWEEN HTTP AND HTTPS IN SECURING YOUR ONLINE DATA

It can get even sneakier. Some of these files might contain code with the capability to try and snatch cookies and login credentials from browsers and potentially sell them on the dark web. 

How hackers compromise friends and contacts 

The deception doesn't stop at fake alerts. While the threat of fake profiles has always been there, the real game-changer is the hackers' skill in taking over genuine accounts. How? It often starts with a well-crafted phishing message, possibly disguised as an attachment. 

Once an unsuspecting user downloads this, it can trigger a series of events. The malware inside these files can potentially extract cookies and login credentials from browsers, giving hackers the keys to the kingdom. 

Now, imagine getting a suspicious message not from a stranger but from Jane, your childhood friend, or Bob, the guy you often chat with at the local cafe. Unbeknownst to them, their accounts have been hacked, turning them into unwitting accomplices. 

GET TECH TIPS & SECURITY ALERTS WITH THE FREE CYBERGUY NEWSLETTER - CLICK HERE 

Why Messenger? 

Simple. It's the trust factor.  We're used to getting emails from strangers, but Messenger is where we talk to our friends. We feel safe and relaxed there. 

And that’s exactly what the scammers want. They know it’s easier to trick you when you're not suspicious, and your guard is down. That’s why Messenger is a perfect place for crooks to spread their scams. 

Guarding yourself against Messenger phishing 

Trust, but verify: While it's nice to trust our friends and contacts, always be wary of unexpected or out-of-character messages. If someone you know sends you an unusual attachment or link or discusses topics they never have before, be skeptical. 

Verify outside of Messenger: Should you receive a suspicious or unexpected copyright violation notice, message from Facebook, or any other alert – don't panic. Reach out to the sender outside of Messenger. A quick phone call or text can help clarify whether the message is genuine. 

Have strong antivirus protection on all your devices: The best way to protect yourself from having your data breached is to have antivirus protection installed on all your devices. Strong antivirus software actively running on your devices will alert you of any malware in your system, warn you against clicking on any malicious links in phishing emails, and ultimately protect you from being hacked. 

Man on a computer

If someone you know sends you an unusual attachment or link or discusses topics they never have before, be skeptical. (Cyberguy.com)

MORE: HOW TO AVOID BEING A VICTIM OF THIS SNEAKY FACEBOOK MARKETPLACE SCAM 

See the best 2023 antivirus protection winners for your Windows, Mac, Android & iOS devices. 

Update regularly: Hackers often prey on vulnerabilities found in outdated software. Regularly updating your apps, browser, and operating system ensures you're protected by the latest security patches. 

Have strong passwords and use 2-factor authentication: Using the same password across multiple platforms will always make you more vulnerable because if one account gets hacked, they all get hacked. And 2-factor authentication is just an extra shield that will prevent a hacker from getting into your accounts. Make sure to use a password manager to keep track of all your passwords. 

Act fast: At the slightest suspicion that you've been targeted, change your Messenger and Facebook passwords. Review your active sessions on Facebook (located in your security settings) and log out of any unfamiliar devices. 

Use identity theft protection 

If you run a Facebook business, there's a good chance you could be a target of hackers who use fake alerts to trick you into downloading malware that can steal your personal information and sell it on the dark web. Identity Theft protection companies can monitor personal information like your home title, Social Security number (SSN), phone number, and email address and alert you if it is being sold on the dark web or being used to open an account.  They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals. 

Some of the best parts of using an identity theft protection company like our No. 1 pick is that they include identity theft insurance of up to $1 million to cover losses and legal fees and also include a U.S.-based case manager who helps you recover any losses

See my tips and best picks on how to protect yourself from identity theft 

Invest in removal services 

If you want to protect your online privacy and security, you might consider using a removal service that can help you delete your personal data from hundreds of sites and prevent hackers from exploiting your information. 

While no service promises to remove all your data from the internet, having a removal service can be effective if you want to constantly monitor and automate the process over a longer period of time. 

MORE: DON’T FALL FOR THESE FAKE PACKAGE DELIVERY NOTIFICATIONS 

See my tips and best picks for removing yourself from the internet 

If you suspect you're a victim 

Secure your account: Immediately change your password to lock potential hackers out. If you’re locked out of your account, contact Facebook's support immediately to recover it. 

Inform your contacts: Alert friends and family so they're aware and won't be duped by messages or requests coming from your compromised account. 

Scan for malware: If you've downloaded an attachment or clicked a link from a suspicious message, run a thorough system scan using a trusted antivirus or malware detection tool. 

Monitor account activities: Keep an eye on your active sessions, messages sent, and any changes made to your account. Any unfamiliar activity should be reported and reversed. 

Seek expert help: If you believe your personal information, such as financial data or other sensitive details, has been compromised, consider reaching out to cyber security professionals or services that can guide you on further recovery and protection steps.

Woman on a computer

If you've downloaded an attachment or clicked a link from a suspicious message, run a thorough system scan using a trusted antivirus or malware detection tool. (Cyberguy.com)

RUSSIAN CYBERCRIME SUSPECTS INDICTED IN MULTI-MILLION DOLLAR TRICKBOT MALWARE AND CONTI RANSOMWARE SCHEME

Kurt's key takeaways 

As we increasingly live out our lives online, the virtual world becomes just as full of dangers as the physical one. It’s a stark reminder that the convenience of platforms like Facebook Messenger comes with its own set of challenges that we should constantly be on the lookout for. 

So, next time you chat with someone online, think twice before you click or type. You never know who might be on the other end or what they might do with your data. 

Have you ever received a suspicious message on Messenger or any other platform that made you think twice? How did you handle it? Let us know by writing us at Cyberguy.com/Contact 

For more of my tech tips & security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter 

CLICK HERE TO GET THE FOX NEWS APP

Answers to the most asked CyberGuy questions: 

What is the best way to protect your Mac, Windows, iPhone and Android devices from getting hacked? 

What is the best way to stay private, secure, and anonymous while browsing the web? 

How can I get rid of robocalls with apps and data removal services? 

Copyright 2023 CyberGuy.com. All rights reserved. 

universo-virtual.com
buytrendz.net
thisforall.net
benchpressgains.com
qthzb.com
mindhunter9.com
dwjqp1.com
secure-signup.net
ahaayy.com
soxtry.com
tressesindia.com
puresybian.com
krpano-chs.com
cre8workshop.com
hdkino.org
peixun021.com
qz786.com
utahperformingartscenter.org
maw-pr.com
zaaksen.com
ypxsptbfd7.com
worldqrmconference.com
shangyuwh.com
eejssdfsdfdfjsd.com
playminecraftfreeonline.com
trekvietnamtour.com
your-business-articles.com
essaywritingservice10.com
hindusamaaj.com
joggingvideo.com
wandercoups.com
onlinenewsofindia.com
worldgraphic-team.com
bnsrz.com
wormblaster.net
tongchengchuyange0004.com
internetknowing.com
breachurch.com
peachesnginburlesque.com
dataarchitectoo.com
clientfunnelformula.com
30pps.com
cherylroll.com
ks2252.com
webmanicura.com
osostore.com
softsmob.com
sofietsshotel.com
facetorch.com
nylawyerreview.com
apapromotions.com
shareparelli.com
goeaglepointe.com
thegreenmanpubphuket.com
karotorossian.com
publicsensor.com
taiwandefence.com
epcsur.com
odskc.com
inzziln.info
leaiiln.info
cq-oa.com
dqtianshun.com
southstills.com
tvtv98.com
thewellington-hotel.com
bccaipiao.com
colectoresindustrialesgs.com
shenanddcg.com
capriartfilmfestival.com
replicabreitlingsale.com
thaiamarinnewtoncorner.com
gkmcww.com
mbnkbj.com
andrewbrennandesign.com
cod54.com
luobinzhang.com
bartoysdirect.com
taquerialoscompadresdc.com
aaoodln.info
amcckln.info
drvrnln.info
dwabmln.info
fcsjoln.info
hlonxln.info
kcmeiln.info
kplrrln.info
fatcatoons.com
91guoys.com
signupforfreehosting.com
faithfirst.net
zjyc28.com
tongchengjinyeyouyue0004.com
nhuan6.com
oldgardensflowers.com
lightupthefloor.com
bahamamamas-stjohns.com
ly2818.com
905onthebay.com
fonemenu.com
notanothermovie.com
ukrainehighclassescort.com
meincmagazine.com
av-5858.com
yallerdawg.com
donkeythemovie.com
corporatehospitalitygroup.com
boboyy88.com
miteinander-lernen.com
dannayconsulting.com
officialtomsshoesoutletstore.com
forsale-amoxil-amoxicillin.net
generictadalafil-canada.net
guitarlessonseastlondon.com
lesliesrestaurants.com
mattyno9.com
nri-homeloans.com
rtgvisas-qatar.com
salbutamolventolinonline.net
sportsinjuries.info
topsedu.xyz
xmxm7.com
x332.xyz
sportstrainingblog.com
autopartspares.com
readguy.net
soniasegreto.com
bobbygdavis.com
wedsna.com
rgkntk.com
bkkmarketplace.com
zxqcwx.com
breakupprogram.com
boxcardc.com
unblockyoutubeindonesia.com
fabulousbookmark.com
beat-the.com
guatemala-sailfishing-vacations-charters.com
magie-marketing.com
kingstonliteracy.com
guitaraffinity.com
eurelookinggoodapparel.com
howtolosecheekfat.net
marioncma.org
oliviadavismusic.com
shantelcampbellrealestate.com
shopleborn13.com
topindiafree.com
v-visitors.net
qazwsxedcokmijn.com
parabis.net
terriesandelin.com
luxuryhomme.com
studyexpanse.com
ronoom.com
djjky.com
053hh.com
originbluei.com
baucishotel.com
33kkn.com
intrinsiqresearch.com
mariaescort-kiev.com
mymaguk.com
sponsored4u.com
crimsonclass.com
bataillenavale.com
searchtile.com
ze-stribrnych-struh.com
zenithalhype.com
modalpkv.com
bouisset-lafforgue.com
useupload.com
37r.net
autoankauf-muenster.com
bantinbongda.net
bilgius.com
brabustermagazine.com
indigrow.org
miicrosofts.net
mysmiletravel.com
selinasims.com
spellcubesapp.com
usa-faction.com
snn01.com
hope-kelley.com
bancodeprofissionais.com
zjccp99.com
liturgycreator.com
weedsmj.com
majorelenco.com
colcollect.com
androidnews-jp.com
hypoallergenicdogsnames.com
dailyupdatez.com
foodphotographyreviews.com
cricutcom-setup.com
chprowebdesign.com
katyrealty-kanepa.com
tasramar.com
bilgipinari.org
four-am.com
indiarepublicday.com
inquick-enbooks.com
iracmpi.com
kakaschoenen.com
lsm99flash.com
nana1255.com
ngen-niagara.com
technwzs.com
virtualonlinecasino1345.com
wallpapertop.net
nova-click.com
abeautifulcrazylife.com
diggmobile.com
denochemexicana.com
eventhalfkg.com
medcon-taiwan.com
life-himawari.com
myriamshomes.com
nightmarevue.com
allstarsru.com
bestofthebuckeyestate.com
bestofthefirststate.com
bestwireless7.com
declarationintermittent.com
findhereall.com
jingyou888.com
lsm99deal.com
lsm99galaxy.com
moozatech.com
nuagh.com
patliyo.com
philomenamagikz.net
rckouba.net
saturnunipessoallda.com
tallahasseefrolics.com
thematurehardcore.net
totalenvironment-inthatquietearth.com
velislavakaymakanova.com
vermontenergetic.com
sizam-design.com
kakakpintar.com
begorgeouslady.com
1800birks4u.com
2wheelstogo.com
6strip4you.com
bigdata-world.net
emailandco.net
gacapal.com
jharpost.com
krishnaastro.com
lsm99credit.com
mascalzonicampani.com
sitemapxml.org
thecityslums.net
topagh.com
flairnetwebdesign.com
bangkaeair.com
beneventocoupon.com
noternet.org
oqtive.com
smilebrightrx.com
decollage-etiquette.com
1millionbestdownloads.com
7658.info
bidbass.com
devlopworldtech.com
digitalmarketingrajkot.com
fluginfo.net
naqlafshk.com
passion-decouverte.com
playsirius.com
spacceleratorintl.com
stikyballs.com
top10way.com
yokidsyogurt.com
zszyhl.com
16firthcrescent.com
abogadolaboralistamd.com
apk2wap.com
aromacremeria.com
banparacard.com
bosmanraws.com
businessproviderblog.com
caltonosa.com
calvaryrevivalchurch.org
chastenedsoulwithabrokenheart.com
cheminotsgardcevennes.com
cooksspot.com
cqxzpt.com
deesywig.com
deltacartoonmaps.com
despixelsetdeshommes.com
duocoracaobrasileiro.com
fareshopbd.com
goodpainspills.com
kobisitecdn.com
makaigoods.com
mgs1454.com
piccadillyresidences.com
radiolaondafresca.com
rubendorf.com
searchengineimprov.com
sellmyhrvahome.com
shugahouseessentials.com
sonihullquad.com
subtractkilos.com
valeriekelmansky.com
vipasdigitalmarketing.com
voolivrerj.com
zeelonggroup.com
1015southrockhill.com
10x10b.com
111-online-casinos.com
191cb.com
3665arpentunitd.com
aitesonics.com
bag-shokunin.com
brightotech.com
communication-digitale-services.com
covoakland.org
dariaprimapack.com
freefortniteaccountss.com
gatebizglobal.com
global1entertainmentnews.com
greatytene.com
hiroshiwakita.com
iktodaypk.com
jahatsakong.com
meadowbrookgolfgroup.com
newsbharati.net
platinumstudiosdesign.com
slotxogamesplay.com
strikestaruk.com
trucosdefortnite.com
ufabetrune.com
weddedtowhitmore.com
12940brycecanyonunitb.com
1311dietrichoaks.com
2monarchtraceunit303.com
601legendhill.com
850elaine.com
adieusolasomade.com
andora-ke.com
bestslotxogames.com
cannagomcallen.com
endlesslyhot.com
iestpjva.com
ouqprint.com
pwmaplefest.com
qtylmr.com
rb88betting.com
buscadogues.com
1007macfm.com
born-wild.com
growthinvests.com
promocode-casino.com
proyectogalgoargentina.com
wbthompson-art.com
whitemountainwheels.com
7thavehvl.com
developmethis.com
funkydogbowties.com
travelodgegrandjunction.com
gao-town.com
globalmarketsuite.com
blogshippo.com
hdbka.com
proboards67.com
outletonline-michaelkors.com
kalkis-research.com
thuthuatit.net
buckcash.com
hollistercanada.com
docterror.com
asadart.com
vmayke.org
erwincomputers.com
dirimart.org
okkii.com
loteriasdecehegin.com
mountanalog.com
healingtaobritain.com
ttxmonitor.com
bamthemes.com
nwordpress.com
11bolabonanza.com
avgo.top