One of my Facebook friends got hacked and her account is sending these strange messages to all her friends… pic.twitter.com/d4ciIzsb06
— Dan Leveille (@danlev) May 8, 2014
There has been some variation in the suspicious claims of a home fire, but typically, users are prompted to click a link to video of the alleged destruction that instead brings them to a bogus login page for that particular social network. If they enter their username and password, they’re directed to download a “YouTube Player,” Hoax-Slayer explained in December:
However, downloading the supposed YouTube update will install a trojan on the user’s computer. Typically, such trojans can harvest information from the compromised computer and allow criminals to control the computer remotely.
Meanwhile, the scammers can use the information stolen via the fake Facebook login page to hijack genuine Facebook accounts. Once in the compromised accounts, the scammers can lock out the rightful owners and use the accounts to send out more of the same “My home is burning” scam messages. Thus, the cycle continues.
So, you know, watch out for that. And if your house really catches fire, call 911 before telling your Facebook pals. Also, if you’re the type to click through for live, streaming video of a good friend’s house burning to the ground, you maybe deserve to get hacked? Just saying!