Lately, there are more and more Facebooks phishing scams and a lot of people lose their accounts. Now another series of URLs are sent and if you login on that URL, then you will lose your account and the scammer will use it to send the message to more people.
There are daily phishing attempts, but this one is better organized, uses more URLs and managed to steal a lot of user accounts.
The URLs you have to avoid are: areps.at, bests.at, kirgo.at, nutpic.at. You should also be very careful about every link you click in your emails. Be sure it’s www.facebook.com. Some scams do websites like www.facebook.com.areps.at, for example, so look carefully at the URLs.
I wonder how come Facebook could allow this sort of malicious software to be uploaded to their applications?
I don’t think Facebook is allowing it… they can’t really control this at all. The messages get sent to people separately by email to their regular email accounts, then they click on it thinking it’s taking them to FB – the same way the banking phishing scams work.