Wrote: Fatbardh Dema
A message on the "WhatsApp" communication application is being sent to citizens of Kosovo, claiming to come from the Facebook/META platform.
This message, written in Albanian, claims that the user has violated Facebook's community standards, and calls for clicking on a link. Otherwise, it is said that the account on this social media will be deactivated within 12 hours.
What is behind this message?
The link provided in the content is suspicious and does not come from Facebook. Also, the number that sent this email has a Vietnamese prefix (+84).
Hibrid.info has clicked on the link provided in this SMS, and the first results show that it is suspicious. (here)
To further verify the credibility of this site, hibrid.info has used the website verification platform “Scamdoc.com” and the results show that it is suspicious and contains “Malware”. (see here)
What is “Malware”?
Malware or malicious application is any software intentionally created to cause interference with a computer, server, client or computer network, leak private information, gain unauthorized access to information or systems, deny access to information or that inadvertently interferes with the security and privacy of the user's device.
Malware is not a virus, but is a malicious software/application that invades or corrupts your computer network. The purpose of malware is to cause irreparable damage and steal information or resources for monetary gain or obvious sabotage purposes.
Common types of malware include Trojan viruses, worms, spyware, adware, and ransomware. (see here and here)
Another piece of evidence that this email was not sent by Facebook is the number that appears in the SMS. This phone number has the prefix +84, which after research, hibrid.info has confirmed that it belongs to the state of Vietnam. (see here)
Facebook has issued notices to users about these fake messages, clarifying that they should not be trusted. (see here)
You can trust a message from META platforms if the addresses end with:
- facebookmail.com (including priority.facebookmail.com )
- facebook.com (including support.facebook.com and developers.facebook.com )
- fb.com
- metamail.com
- meta.com
Analyze:
An electronic message (SMS) has been sent to Kosovo citizens on WhatsApp, which is in Albanian and claims to be from Facebook/META.
After verifying the facts, hibrid.info has confirmed that the same was not sent by Facebook and contains a suspicious link, as well as "Malware", which is malicious software developed by hackers to steal data and damage or destroy computer equipment, servers and computer systems.
Also, the number that sent this SMS has a Vietnamese prefix.
Based on the working methodology, hibrid.info evaluates this SMS as "Scam".
Reasoning:
The “Deception” rating is given to informational content that is manipulated in terms of visual (deepfake, cheapfake), audio, or textual content to deceive the audience. This form of deception is usually used to produce false and manipulated content.