Phishers are known for capitalizing on current events and using them in their phishing campaigns. Celebrity scandals are popular and Symantec recently observed a phishing attack on the Facebook platform that claimed to have the sex tape of well-known Filipino television host and news anchor Paolo Bediones. Paolo Bediones became a hot topic last month when an adult video featuring a person resembling this TV host appeared online.
Symantec discovered a fake Facebook site behind a campaign that offered the "sex scandal" video of Paolo Bediones.
Figure. Phishing site requests user login, then steals credentials
A message on the phishing site requests users to login to watch the full sex video. If users enter their Facebook login credentials, the phishing page steals the username and password then redirects to an adult website which hosts the promised video. By redirecting users to this adult website, users are less likely to be aware that they have been scammed and may believe their login was valid.
This phishing site is hosted using free hosting and targets Filipino Facebook users. Symantec has notified Facebook and they are investigating.
Symantec advises all users to follow these best practices to avoid becoming victims of phishing attacks: