Facebook has launched a security guide for users as it looks to curb the number of successful attacks on the site.
The Guide to Facebook Security features 14 pages of advice, covering everything from phishing and clickjacking, to how to recover a hacked account.
Unlike the insanely horrible email scams written in poor English by scammers, most of the fake Facebook login screens are pretty believable.
Facebook described the document as "fun to read and easy to understand," although beauty is in the eye of the beholder.
"We explain how to protect your account, avoid scammers, and configure advanced security settings," Facebook explained in a note to users.
"If you're not using one-time passwords, secure browsing, or even tracking your account activity, this guide shows you how. It even explains why account thieves and malware pushers want your account."
People power
Facebook was keen to make the point that users were just as responsible for security as the people running the website.
"Just as a city paints sidewalks, and pedestrians look both ways before crossing the street, security on Facebook is a responsibility shared between Facebook and the people who use its platform," the report read.
It also admitted scams were harder to identify on Facebook, when compared to email tricks.
"On Facebook, identifying scams is trickier since messages appear to be coming from people you know and trust," the report read.
"Unlike the insanely horrible email scams written in poor English by scammers, most of the fake Facebook login screens are pretty believable."
Facebook also warned users to look out for the perennially pesky who's been looking at your profile' scam.
"This enticing scam tries to trick you into pasting text into your browser address bar," Facebook explained.
"The unique code' shown above is the malicious script. While you're being patient as instructed, the script is setting up your profile to spam all of your Friends. In response to detecting these kind of attacks, Facebook added checks to help detect scripts being pasted into the address bar."
Earlier this week, a 25-year-old male from York appeared in court accused of breaking through Facebook's security defences.
-
Bigger salaries, more burnout: Is the CISO role in crisis?In-depth CISOs are more stressed than ever before – but why is this and what can be done?
-
Cheap cyber crime kits can be bought on the dark web for less than $25News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
-
Latest Meta GDPR fine brings 12-month total to more than €1 billionNews Meta was issued with two hefty GDPR fines for “forcing” users to consent to data processing
-
"Unacceptable" data scraping lands Meta a £228m data protection fineNews The much-awaited decision follows the scraping of half a billion users' data and received unanimous approval from EU regulators
-
Meta notifies around 1 million Facebook users of potential compromise through malicious appsNews The vast majority of apps targeting iOS users appeared to be genuine apps for managing business functions such as advertising and analytics
-
Facebook business accounts hijacked by infostealer malware campaignNews Threat actors are using LinkedIn phishing to seize business, ad accounts for financial gain
-
Meta begins encrypting Facebook URLs, nullifying tracking countermeasures
News The move has made URL stripping impossible but will improve analytics
-
Meta hit with €17 million fine over multiple GDPR breachesNews The social media giant set aside over €1 billion in November to help it cope with potential fines arising from data protection investigations
-
Meta says Apple's iOS privacy changes will cost it $10 billion in 2022News The company's CFO suggests Google "faces a different set of restrictions" because it pays Apple to remain the default iOS search engine
-
Google, Facebook fined €210 million for making it difficult for users to reject cookiesNews Data regulator CNIL gives companies three months to provide a system for refusing cookies that is as easy as single click consent
