Phishing Alert, Hackers Take Advantage Of Facebookmail.com's Official Domain To Attack SMEs

JAKARTA Check Point, a cybersecurity company, revealed that there is a large-scale phishing campaign that utilizes the Meta Business Suite feature. This campaign exploits the domain of Facebookmail.com.

Despite being distributed to many countries, the main targets of this attack are the US, Europe, Canada and Australia. Hackers focus on attacking industries that rely heavily on advertising, such as automotive, real estate, and finance.

The attack began when cybercriminals created fake Business pages. This page is modified with a logo and name that resembles the official brand. Then, they use the Business invitation feature to send malicious emails.

Check Point said that this phishing campaign was very dangerous because, "hid behind the legitimate infrastructure, they immediately gained credibility." Hackers also managed to get their emails urging customers.

For example, they send emails with subjects, required Actions: You Are Invited to Join Free Ad Credit Program. They also sometimes add the phrase 'Necessary Account Verification' to the subject'.

Once clicked, the link will direct the victim to a phishing site hosted in a domain like vercel.app. This fake site is designed to steal incoming credentials and other sensitive information. The main targets are small and medium enterprises (SMEs) that often receive genuine business notifications.

To avoid this phishing method, brands or organizations need to train employees to question unusual requests, even from sources that appear to be trusted. In addition, activating multifactor authentication (MFA) is very important at this time.

The English, Chinese, Japanese, Arabic, and French versions are automatically generated by the AI. So there may still be inaccuracies in translating, please always see Indonesian as our main language. (system supported by DigitalSiber.id)