Science & Tech · Cybersecurity · 4 hrs ago
Scammers use fake Marketplace listings to prompt text replies
Scammers are texting people fake Facebook Marketplace listings that show the recipient as the seller.
Researchers at Malwarebytes examined an example in which the listing used the recipient’s name but a profile photo belonging to another Facebook user.
The scammers may have matched a name with a phone number using breached data or another source, but how they obtained the details is unclear.
The listing is a conversation lure: it may prompt someone to reply out of concern that their identity is being used.
The scam’s exact next step is unknown, because finding out would require engaging with the sender.
The Federal Trade Commission warns that replying to an unexpected text can confirm a number is active, which may lead to more scam calls and messages.
Do not reply to suspicious texts, since even a brief response can give scammers useful information.
Scammers are using fake Facebook Marketplace listings to prompt people to reply to unexpected text messages.
The listings show the recipient’s real name as the seller, which can make the message feel personal.
Malwarebytes researchers found that an example listing used a profile photo belonging to a different Facebook user with the same name.
The exact motive behind the campaign is unclear, but replying can confirm that a phone number is active.
The Federal Trade Commission warns that responding to an unexpected text can lead to more scam calls and messages.
- Who
- Scammers are sending the messages to people whose names and phone numbers they appear to know.
- What
- The texts show fake Facebook Marketplace listings using the recipient’s name to encourage a reply.
- When
- Not stated
- Where
- The messages are sent by text; Malwarebytes analyzed an example sent through iMessage.
- Why
- The exact motive is unclear. A reply can confirm that the number is active.
This story does not have two clearly opposing sides.
This story does not have a timeline yet.
- Researchers
- Malwarebytes analyzed an example sent through iMessage
- Listing detail
- The recipient’s name appeared as the seller
- Profile photo
- It belonged to another Facebook user with the same name
- Potential risk
- Replying can confirm that a phone number is active
What people are saying
Is this still available for purchase?
That's not me.
Sources
Related news
Cyberattack disrupts refrigeration at hundreds of French supermarkets
Cyberattack disrupts IT systems at three TFG London fashion brands
GitLab fixes maximum-severity flaw that could let attackers run server code
Ledger links CryptoBilis wallet implants to confirmed crypto thefts
Cyberattacks target refrigeration systems at more French supermarkets
Ahold Delhaize takes some systems offline after cyberattack
CISA adds five exploited software flaws amid China-linked espionage concerns
Three Hyderabad residents lose ₹5.35 crore in cyber fraud
Hack exposes personal data of more than 400 Saemaul Geumgo members
Canadian cybersecurity executive arrested in ShinyHunters investigation
SAP fixes maximum-severity flaw in its Python Cloud SDK
