MENU

 

The following information was obtained from the different cyber security sources and provided as a notification to all parties concerned pursuant to the mandate of the Philippine National Police  Anti-Cybercrime Group (PNP ACG).


The information provided is classified as Restricted pursuant to the PNP Regulation 200-012 on document securitywith impact rating of significant and threat rating of high,based on PNP Information Communication p. 22 and p.129.


SUMMARY

Nowadays, the most common popular social networking site in the Philippines is Facebook, it is a popular free social networking website that allows registered users to create profiles, upload photos and video, send messages and keep in touch with friend, family colleague.  Facebook can easily be  accessed through a desktop PC or a mobile phone. A rough estimate of forty seven million facebook user are Filipino people.

Cyber criminals take the opportunity of using this social media sites to gain acess through phishing. Phishing is a malicious attempt to gain access a certain account or  of personal information of an individual by getting the user to login and provide sensitive information into a fake website. Many scammers try to trick people with fake offers of free, rare, secret or exclusive digital goods and often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one.

It is also an example of a social engineering technique used to deceive users, and exploits the poor usability of current web security technologies.  

RECOMMENDATION

The community are advised to follow the best practices in securing and protecting your facebook account and safety measure to avoid phishing whether for personal use or for work. When in doubt, type www.facebook.com into your browser to get  to facebook. We also recommend checking official facebook pages or app pages before clicking many mentions.

Beware  of:
•    Messages with misspellings and typos, multiple fonts or oddly-placed accents;
•    Messages that claim to have your password attached. Facebook will never send you your password as an attachment;
•    Mismatched links: When you hover over a link, look at the status bar at the bottom of your browser window, and make sure the link actually goes to the place shown in the email;
Messages asking for your personal information and facebook will never ask you for:
•    Your password account;
•    Your social security number or tax identification number;
•    Your full credit card number or PIN; and
•    Messages claiming that your account will be deleted or locked unless you take immediate action.

For additional information, please refer to the following security websites:

•    https://www.facebook.com/help/1668
•    http://www.rappler.com/brandrap/profile-internet-users-ph63010078512?helpref=faq_content
•    http://navtechno.blogspot.com/2016/08/how-to-hack-facebook-with-phishing-page.html


POINT OF CONTACT

Please contact CSRAD, PNP ACG for any inquiries related to this CYBER SECURITY BULLETIN at http://mail.pnp.gov.ph/ and This email address is being protected from spambots. You need JavaScript enabled to view it. or call 7230401 local 3572.