Facebook's Lack Of Hacking Resolution System For Nigerian Scammers

from the seems-like-a-problem dept

Thu, Jan 22nd 2009 6:46pm — Mike Masnick

In the past week, you may have seen various news stories about Nigerian scammers hacking into Facebook, and then sending their "friends" messages, saying they're stranded in London without money. It is, of course, just the latest improvement on the venerable old Nigerian 419 scam, this time upgraded to use hacked/phished Facebook accounts to trick trusting friends into coughing up their money. However, one of the biggest issues is raised by Yehuda Berlinger, who points out that for those who are hacked, Facebook doesn't seem to have any reasonable way to contact them and fix the problem. Considering how much of your "identity" might be tied up in your social networking profile, you would think that a company like Facebook would have a ready made system in place to handle such "emergency" situations.

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: 419, hacking, phishing, scams, social networks
Companies: facebook

20 Comments

If you liked this post, you may also be interested in...

Reader Comments

Subscribe: RSS

View by: Time | Thread

ToySouljah, 22 Jan 2009 @ 8:43pm

I guess they think (and it is reasonable) that the friends that would send you money would contact you or at least know if there is a reason you'd be in London and stranded. That is one reason I do not allow just anyone to be a "friend". I know it looks really cool when you have a million friends on your list, but it also opens you up to more spam and scams like this. My cousin had her account compromised and I called her to let her know and she quickly changed her password. I didn't read into what type of hack this was or if it in fact was a real hack and not just someone who guessed a password or used brute force, but those are the easiest to recover from (change your password to something more secure). If it was a real hack and involved someone getting access to multiple accounts at once by breaking into one of their main servers and working the system from there then Facebook needs to look at their security measures and find a resolution to plug that hole. The biggest problem is that people set up accounts with VERY simple passwords that are cracked with even the simplest dictionary used. You would think that with the way technology has progressed that people would secure their passwords better since maybe 5 or 10 years ago a couple of words would take a few hours to crack, but now it can be done in seconds.

So if someone actually falls for this and blindly sends money without asking questions (even if they are family or friends) then sorry to say it, but they deserve to be ripped off. The internet is a big game of cat and mouse and it is up to the person to keep themselves well-informed of ways to better protect themselves and their data.
[ link to this | view in chronology ]
- ToySouljah, 22 Jan 2009 @ 9:24pm
  
  Re:
  Well, after getting a few minutes to read the article it seems they were completely locked out of their accounts. The passwords had been changed and the email accounts used to send out new passwords was replaced. Well, like I said...a real friend would have either your phone number or some other way of reaching you or your family (this would be considered a serious case that my family would want to be notified ASAP). Why don't they use security questions when attempting to change your password and then sending you an email (before it can be modified) that has to be verified by you. My bank does this if I make ANY changes to my account. It is a little bit annoying, but well worth the security...unless you of course use the same password for your email account and then you are pretty much S.O.L. since now both accounts have been compromised...if they get passed the security question that is.
  
  Also, lol...you may want to not have something like "What is your favorite movie" as a question and then on your page you list the movie as a favorite. I know it sounds really stupid and anyone with a gram of common sense wouldn't do it, but I have seen it plenty of times. I tend to use "off" answers. Or if you can create your own question (best) then make it a phrase to help you remember the "answer". People see my question "ST-SabCR-SitE" and it means nothing to them, but it has meaning to me :)
  [ link to this | view in chronology ]
- Angelina (profile), 20 Dec 2010 @ 12:09pm
  
  Re:@ToySouljah
  " That is one reason I do not allow just anyone to be a friend"
  
  You can view How To View Private Facebook Profiles and hack Facebook Profiles even if you aren't allow them to your friends.
  
  If you want you can read about that here:
  http://howtoviewprivatefacebookprofiles.net/
  [ link to this | view in chronology ]
Canucklehead, 22 Jan 2009 @ 8:59pm

Unless you need to report one of those "disgusting and offensive" breastfeeding pictures, you can expect prompt service.
[ link to this | view in chronology ]
- Anonymous Coward, 23 Jan 2009 @ 3:31am
  
  Re:
  What we need to get Facebook's attention is to convince the Nigerian scammers is that we will give them money for posting pictures of them breast feeding.
  [ link to this | view in chronology ]
Dan, 22 Jan 2009 @ 11:44pm

I don't have any friends that would go to London and they would know better then to ask me to bail them out.
[ link to this | view in chronology ]
- Anonymous Coward, 23 Jan 2009 @ 2:56am
  
  Re:
  was going to post something similar (specially "they would know better then to ask me to bail them out")
  [ link to this | view in chronology ]
Yeebok (profile), 23 Jan 2009 @ 12:17am

Facebook is dire
Anyone who trusts facebook with their data is silly. You -do- know that don't delete anything. They're not there so you can poke your mates, they're there to profit off you. A piece of paper on your desk at home probably has more security than your facebook data. All it needs is one dodgy friend ..
[ link to this | view in chronology ]
Anonymous Coward, 29 Jan 2009 @ 12:09pm

This just happened to me. How do I disable my account and fix it so that the hacker can no longer log-in as me?? Any advice?
[ link to this | view in chronology ]
csirvatka, 29 Jan 2009 @ 7:23pm

No way to contact Facebook
This exact thing happened to my husband's account last night. I had the perpetrator chatting in my IM acting like he was my husband (how absurd) and in the meanwhile trying to find a way to inform someone at Facebook, but to no avail. All I kept finding were links to more pages with links. No Contact Us form or anything. I know the readers here would know better than to send money, but not everyone is that Internet savvy. Facebook needs to listen to this situation and set up communications or they will lose current and future "Friends."
[ link to this | view in chronology ]
billy bob, 25 Feb 2009 @ 8:41am

no comment
i think its funny that you dumbas's got hacked into
[ link to this | view in chronology ]
mike, 20 Apr 2009 @ 8:21pm

How to view private facebook profiles
Facebook is not doing a very good job at being secure. Read this article: http://howtoviewprivatefacebookprofiles.com
[ link to this | view in chronology ]
charley iyke, 9 Jun 2009 @ 4:43am

you all suck
its a pity that when a hack occurs, innocent nigerians are accused. the last time i was hacked on facebook, i was able to trace the hacker of my account, the son of a bitch was using a proxifier to hide his ip. but i used my high tech deproxifier to find out he was actually from indonesia. so please dont blame innocent nigerians. i so much pity them for the stinch on thier name.....
[ link to this | view in chronology ]
- Anonymous Coward, 31 Aug 2019 @ 10:51am
  
  Re: you all suck
  true bro,but ill like you dm
  [ link to this | view in chronology ]
view private facebook profiles, 29 Jun 2009 @ 3:21am

Action against Nigerians
Nigeria is famous for scam related issues. Facebook should block them...
[ link to this | view in chronology ]
Yadi ikechukwu, 1 Jul 2009 @ 2:02pm

funny! do what you want
You can blame and curse all you want ladies, gentlemen and anonymous people but it won't change anything.

Let Facebook take an action that they think is in the best interest of the majority just like paypal, clickbank, moneybrookers... the supposed Nigerians who hacked y'all still use these services that non hacking-scamming Nigerians are "BANNED" from.

Look the best thing is to protect yourself instead of looking for a false sense of security that these business giants provide.

You could get hacked/scammed/conned by "Nigerians" or your fellow country men or indians or French/asian guys when you do, please ask facebook to block all of them including your own country cos you can't tell me that you do not have hackers and malicious virus writers from your country.

What a waste! this comment would have earned some reputation in an article directory... hummm.

Enjoy - do what you want: we'll survive.
Ps: gat any issues? thats my real name, Google it; you'll find me if you want solutions to your problem.

Adios
[ link to this | view in chronology ]
Radit, 23 Jul 2009 @ 9:08am

Webmail Hack v2.5 New Update

http://www.ziddu.com/download/5740465/WebmailHackv2.5NewUpdate.rar.html
[ link to this | view in chronology ]
john hairstyle, 6 Feb 2010 @ 5:28am

discus
waw... your web thera are many useful info. thanks
[ link to this | view in chronology ]
Suhari, 1 Jan 2011 @ 12:28am

Good jobs
I have read it. And think it was great article
[ link to this | view in chronology ]
Darren (profile), 5 Nov 2011 @ 4:36am

Police Department
Facebook is connected to the police departments of each country now,but they can not avoid the terrorists,porn directors to create pages.Eventhough people complain about them.
[ link to this | view in chronology ]