Facebook Fake Password Reset Emails

If you receive an email from Facebook about resetting your password, just be careful because it might be a scam or a virus.

There is currently an email going around that asks you to run a .exe file to reset your password. The thing is that most websites will not ask you to run a application to reset your password.

Since I have received this email, I am going to post you all the details so you can watch out so you don’t get fooled.

image

This is a copy of the email that you may receive.

The actual sender however forgot about covering up their actual email address and IP address. But there is still no guarantee that these are correct. But you can find this information in the below information.

 

From – Thu Oct 29 20:15:52 2009
X-Account-Key: account9
X-UIDL: UID1217-1199710621
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Mozilla-Keys:                                                                                
>From tucuman8382@iphone-screen.com Thu Oct 29 12:00:10 2009
Received: from ll81-60-114-192-81.ll81.iam.net.ma ([81.192.114.60])
by XXXXXXXXXXXXXXX with esmtp (Exim 4.69)
(envelope-from )
id 1N3QrZ-0004fu-Bb
for XXXXXXXXX.com; Thu, 29 Oct 2009 12:00:10 +0300
Received: from 81.192.114.60 by ns4.netim.net; Thu, 29 Oct 2009 09:00:09 +0000
Message-ID:
From: “The Facebook Team”
To:
Subject: Facebook Password Reset Confirmation!
Date: Thu, 29 Oct 2009 09:00:09 +0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
  boundary=”—-=_NextPart_000_0006_01CA5876.37B34080″
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-BoxTrapper-Queue: released via email verify

This is a multi-part message in MIME format.

——=_NextPart_000_0006_01CA5876.37B34080
Content-Type: text/plain;
    format=flowed;
    charset=”Windows-1252″;
    reply-type=original
Content-Transfer-Encoding: 7bit

Hey peqi ,

Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
The Facebook Team.

——=_NextPart_000_0006_01CA5876.37B34080
Content-Type: application/zip;
    name=”Facebook_Password_62da0.zip”
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
    filename=”Facebook_Password_62da0.zip”

Comments

  1. By reno

    Reply

Leave a Reply