In spear phishing land, criminals are always searching for information to craft personalized and seemingly genuine emails.
This feature nets search results not just of your Facebook friends, but also the friends of your friends, which can potentially be a pretty large network.
It’s pretty easy to set up an anonymous Facebook account, establish a network of friends, and begin using this new search feature to discover information about lots of people.
We’ve seen law enforcement catch criminals by creating fake identities on Facebook to gather information, and we know that advertisers use information from social networking sites to target customers, criminals do the same.
From an enterprise standpoint, the best defense continues to be an educated user base. Security executives can’t prevent employees from posting information on Facebook, and they can’t prevent Facebook from sharing that information liberally. However, employees can be trained to be safe email users that can recognize a suspicious email and avoid interacting with it.
Author: Rohyt Belani, CEO at PhishMe.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.