Spam/Virus Alert!! Beware of an Email from “Facebook”

Recently a variety of emails containing variances of the subject line, “Facebook Password Reset Confirmation! Important Message”, have been found in my inbox. These emails appear to be legitimate. The sender is “Facebook Support” or “Facebook Services” and confirmation emails when a password is reset is now a standard protocol.

I have included the text of the most recent email:

Dear user of Facebook,

Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
Your Facebook.

Unfortunately, due to a large audience of ego driven hackers, not every email is what is seems. Here are a few quick tips in evaluating the legitimacy of an email:

1. Be wary of unsolicited emails. If you weren’t expecting a package from UPS, then you probably aren’t receiving one. If you are being sent a gift, traditionally the sender will include your phone number not your personal email address for confirmation.
2. Be wary of unsolicited emails especially ones that have attachments! Often times these attachments are executable files that contain viruses. These files often appear in a zipped folder, this allows the spammers to get past your virus vault or scanner.  Once you click to open the attachment, it’s too late. Really…it is that simple.
3. If something looks (smells) fishy…it usually is. You will not be notified through email that you won the lottery. I would not suggest donating to any charities through an unsolicited email. Do not “re-enter” your credit card number in an email for Google Ad Words or anyone else.
4. If you are not sure, don’t hesitate to ask. Simply confirming with the rest of the staff or contacting your Rosemont representative, “Are we expecting a UPS shipment?” “Did we change our password on Facebook” ” Are our domains really due for renewal?” or “Login to Google Ad Words and see if our credit card information is accurate.”
5. Is this email address even associated with my account? I received the “Facebook Password Confirmation” through my work email. My work email is not tied to my Facebook account therefore I would not receive any notifications from Facebook via my work email address so I can immediately dismiss it.

Spammers are getting very savvy and looking for ways to get past your virus and spam protection. The next line of defense is yourself. “To the trenches…!!!”