Myspace Phishing

Table of Contents

1. Nature of Myspace Phishing
2. “Has My Myspace Account Been Phished?”
3. Prevent Myspace Phishing
4. Video: Evil Phisher Hacking Myspace Accounts
5. Photos: Examples of Myspace Phishing
6. Report a Myspace Phishing Page

Nature of Myspace Phishing

Myspace phishing has become a phisher's favorite since late 2006 and through 2007. These scammers generally setup login pages either on myspace profiles or on other websites at different domains. Sometimes you will be tricked into visiting these pages by an email that looks very identical to Genuine myspace emails but most the time evil phishers will trick you with bulletins or messages, ussually sent by a phished account. These communications ask the unsuspecting browser to click a link, where they are directed to a login page that says something along the lines of “You Must Be Logged In To Do That!.” Inherently, since the user has clicked the link they are interested in see what is 'on the other side' so they enter their login details and press enter. The user is either redirected back to myspace where it tells you that you have entered the incorrect details, or you are redirected elsewhere (an advertisement or porn site for example). The myspace phisher uses your login to post bulletins, send messages to friends or input HTML into your profile. The content which is published in your name is either advertisements or links to viruses. This entire fiasco can simply be prevented, just . It has an anti-phishing module that will protect you.

[back to top]

"Has my Myspace Account Been Phished?"

1. Bulletins being posted by 'you,' that were not actually posted by you are a prime indicator of a phished myspace account. Very often your friends will help and send a message informing that you have been phished. A good way to see all the bulletins you have posted is to login and click on “View All Bulletin Entries;” which is located at the bottom of the 'Bulletin Center' blurb. From here direct your attention to the right side of the page and click on “Show Bulletins I've Posted.” If there are bulletins you didn't post and they contain some wacky advertisement or link, then you have been phished. Don't fret! Just change your login details and all is good. Click here to learn how to prevent getting your account phished.
2. If you notice a link or image of a blatent advertisement that you did not put there. There is a slim chance you have been phished. Most links on peoples profiles come from Myspace Layout codes or some other 3rd party Myspace service. However if it is for 'Ringtones' or 'Get Laid Tonight' or something of that nature, there is a strong chance you have been phished. Just change you login details, then go to 'Edit Profile' and search for the code in question and delete it. This can be a task in itself but is worth it if you do not want a stupid ad on your myspace.

[back to top]

Prevent Myspace Phishing

1. If you open a bulletin or a message that looks suspicious, you are better off not clicking it.
2. If you do not have it already, to for free. Firefox will warn you if you are about to enter your details into a fraudulent login form. It will not only do this for myspace, but will do this for every website online. It is a good 2 minute investment and honestly, it is a superior browser.
3. Tell your friends about this site so they can take the measures necessary to prevent themselves from getting phished.
4. Place the little code below onto your website or myspace profile so that your visitors can protect themselves.
Copy (CTRL + C) all the code from the box below and paste (CTRL + V) into your myspace profile.


<a href="http://www.badphisher.com/myspace-phishing" target="_blank"><img src="http://www.badphisher.com/images/external/myspace-phishing.gif" alt="Protect Your Myspace Account from Evil Phishers!" style="border:1px solid #000;margin:25px;"></a>

Video: Evil Phisher Hacking Myspace Accounts

[back to top]

Photos: Examples of Myspace Phishing

[back to top]

Report a Myspace Phishing Page

1. Use Myspace.com's contact form to submit the website, bulletin or myspace profile.(Topic: 'Report Abuse'/Subtopic 'Phishing/Fake Login Pages')
2. Submit the Myspace Phishing Website URL to the following email: phishing-report@us-cert.gov

[back to top]