Some Facebook users have lost access to their fb accounts, due to a phishing scam which has been making the rounds. The scam, which spoofs Facebook, “lures users to enter their information at a site FBAction.net which displays a false Facebook login page”.

Within a short amount of time, users that enter their email and password find that their password has been switched and all of their friends have been emailed from the account.

According to reports- yesterday afternoon, Facebook users began receiving emails appearing to be from Facebook carrying an invitation from a friend. Clicking on the link takes you to the pseudo Facebook site, where you are asked to enter your account credentials.

:

Pseudo Facebook login page at fbaction.net

:

Millions of accouts have since been compromised, and according to Webpronews reports;

“Facebook says it has blocked the domain from being shared on the site, removing referring content, and resetting passwords of senders so attackers can no longer access Facebook accounts. In addition the company says they’ve asked Markmonitor to blacklist the domain and they’ve reached out to ISPs for information to file a civil suit or criminal case. ”

:

: