Fake University Scam Reused Student Credentials to Access Facebook Accounts

Summary

A fake university site collected applicants’ email addresses and passwords. The speaker says those credentials also enabled access to their Facebook accounts, while a tracker revealed users’ clicks and hovers.

Key points

• The fake university website required applicants to create accounts using an email address and password.
• The speaker says credentials entered on the site also worked to access applicants’ Facebook accounts.
• The speaker describes a tracker that showed what users clicked and hovered over on the site.