NP Rank:
redbuddy.be, dynasale.be, linkteria.be: Facebook Phishing Scam
I had a new private message in my Facebook inbox which simply read "look at redbuddy dot be". That's it. From a friend who normally, you know, actually writes stuff. So right away the security alarms were going off... I typed in the url (since I'm on a Mac) and sure enough Safari's phishing alert popped up.
Apparently some of my other friends have gotten this as well, along with one pointing to "dynasale dot be". So watch out, Facebookers... avoid actually navigating to redbuddy.be or dynasale.be. Those be phishy waters... Updating to add linkteria.be, whitemart.be, indigoline.be, areps.at... hey, any PM that tells you only to visit a strange link... don't do it.
Most Recommended Comment
Recommendations (22)
-
Paschen
Narita, Chiba, Japan -
albertacowpoke
Canada -
Nauman Umair Khan
Pakistan -
Suranee
Ratnapura, Sri Lanka 
Anonymous users (6)



Most RecentMost Recommended Comments (28)
at 07:46 on May 23rd, 2009
I hope people see this before they click on anything if they get one of these messages!
at 08:17 on May 23rd, 2009
i clicked on it and when it opened, it was obviously a phishing site so i closed it.... hope i have nt exposed my PC 2 any nasty stuff?
at 08:29 on May 23rd, 2009
i clicked on it. i hope i have nt harmed my PC in any way?
at 08:31 on May 23rd, 2009
If you have spyware sofware on your computer, you should be ok.
at 08:48 on May 23rd, 2009
Does this do any damage? What should someone look for who got the Mac security pfishing message when they went to the redbuddy site? Stupid me-- I knew it looked funny but the person who sent it to me sends links so I just went there... any ideas? I am on mac.
at 09:28 on May 23rd, 2009
When you visit the site it is a fake facebook sign-in page. I guess that if you type in your email and password in the normal way it will email those details to whomever owns the redbuddy site.
at 11:08 on May 23rd, 2009
I think I may have logged into the redbuddy one instead of facebook. Do they steal your password? Does anyone know if I need to reset my password? I guess I should just in case.
at 11:32 on May 23rd, 2009
i effin clicked on it and signed in. i knew i shouldn't have done it. so i changed my password and cleared my cache. i'm on a mac btw. hopefully nothing bad happens. any thoughts anyone?
at 11:22 on May 23rd, 2009
i am not too computer saavy, and i entered in my password with login information. i immediately have changed my password. what else should i do to ensure that nothing else happens on my computer?
at 11:31 on May 23rd, 2009
thanks for leetting us no abouut this!
at 12:01 on May 23rd, 2009
i think what it does if u sign in is send the same message from ur box 2 all ur contacts so they get the same message u got originally ..changing ur password shd help by protecting u from further invasion... i tink...
at 12:10 on May 23rd, 2009
Thanks for this Jordan. Good stuff to know.
at 12:15 on May 23rd, 2009
i dont get it, i opened the facebook message but didn't click on anything. will anything still happen?
at 12:27 on May 23rd, 2009
I don't think so, no
at 13:11 on May 23rd, 2009
I typed this link into my browser (Firefox 3.0.10) and it immediately downloaded AND EXECUTED a file called "f.exe". This is the first time I have ever seen a file run ON MY COMPUTER simply by clicking a link (in FF no less). My software firewall (Comodo IS) started going crazy, warning me that "f.exe" was trying to modify registry entries, etc...
I immediately rebooted my computer and started in safemode. I ran Spybot S&D, AVG & Malwarebytes. AVG found "f.exe. and reported it as "Trojan horse SHeur2.AHBP"
If any of you visited this site and successfully saw the facebook login page, YOU MAY BE INFECTED. Follow the steps I outlined above to remove this virus.
at 14:26 on May 23rd, 2009
I got one too!
Actually it was supposed to me who sent the message to everyone! I wasn't even awake at the time.
I don't even remember logging out Facebook yesterday either, but it was logged out. I just changed my password.
at 14:50 on May 23rd, 2009
does it harm Mac's?
at 21:50 on May 23rd, 2009
Yeah I got this message too. It said that May Lo ( my aunt) sent me the message. I clicked on the link on my email to take me to the message and it told me "Look at this site redbuddy dot be". Since it was from my aunt supposedly, I typed the addy in and thank go I had the phishing guard on for firefox and it told me that this was a phising scam site and that it blocked the site. Then I did a search for this and came aross this site and thank go I read it. Now, I tried to send a message and tried to write on the wall to the people on my facebook list about what I got and what it does and this link too but it would not let me send or post the message. It keeps giving me some sort of error or verification error or the message that some of the content is offensive content and it will be blocked but I have no offensive content what so ever. Soooo... I finally tired to make the message I wrote to a jpg and then I was able to send it on facebook. So peoples try to send a message about this to your facebook friends and see if you get the same problem and let me know thanks.
at 07:13 on May 24th, 2009
I just got the redbuddy.be message yesterday and today I got a new one from a friend who never sends me any notes. This one says "look at this 'picoband.be.' I didn't googled and found this site so I never went to either website. Thank you!!
at 11:23 on May 24th, 2009
I got one directing me to whiteflash.be and another to linkteria.be
Wonder what's up with the whole Belgian thing.
at 14:03 on May 24th, 2009
I got the message to got to linkteria.be just today but it is from a person who never sends me anything so it would have been important. This most certainly wasn't important and just looked just exactly like it is... phishy. I'm glad I didn't click on it and did a search on it first.
at 15:38 on May 24th, 2009
I've recieved this Phishing Scam email from a cousin I would never get an email from, but is a friend of mine on Facebook.
So does this mean he may have been nfected, & if so, the email is trying to infect me because he may of been infected himself by accidently clicking on the link?
I've left a note on my Facebook homepage warning my friends, thanks to this website x
at 00:57 on May 25th, 2009
yes even i got this thing and thankfully before actually browsing for it my friend forwarded this message to me. thanx a lot.
at 03:05 on May 25th, 2009
Thank you for writing this.
great work.
at 07:20 on May 25th, 2009
Anyone that signed in should change there password not only in facebook but in anything else that they use the same password in. A lot of people use the same username and passwords for several different accounts and as a result they might have access to your emails, bebo, twitter, depending on what ones you use the same ID/Password combination.
I went to the site but copped it for what it was, running a scan on my computer now.
at 03:51 on May 26th, 2009
I tried to publish your article on my facebook page, couldn't because it was blocked and got the following message:
"Some content in this message has been reported as abusive by Facebook users."
I'll publish it on twitter! ;)
at 07:04 on May 28th, 2009
What is this all about? a friend on facebook asked me to check this out, but i dont understant
at 04:50 on May 30th, 2009
I got a PM for Dynasale dot be(or de)
I knew this was not right, and I heard about this stuff in the news. I sent a PM to my friend saying she had been hacked. Was that stupid?
at 14:12 on May 31st, 2009
I was looking through my sent messages on facebook and I saw that I had sent a message to all my friends saying hello and then as the body 'linkteria.be'
I sent an apology to my friends. A few days ago (my mac automatically signs me in) I tried to go on facebook and it wouldn't let me sign in. So I changed my password. Is that all I need to do to stop the phishing scam?