WSJ Report: Facebook Breach the Work of Spammers, Not Nation-State Actors

A report by the Wall Street Journal points finger at group that is known to Facebook Security.

The recent Facebook breach that hit 30 million accounts was caused by spammers — not by a nation-state attack group — according to a report by the Wall Street Journal.
The attackers did not go after message contents or history. Instead, according to the
Wall Street Journal
, …they accessed contact details—including phone numbers and email addresses—gender, relationship status, and search and check-in data belonging to 14 million users. For another 15 million users, only names and contacts were accessed…
Why go after this sort of information and not dig deeper for more sensitive personal data? While Facebook has not publicly identified the hackers, citing on-going investigations involving the FBI, people familiar with the investigation are quoted by the Wall Street Journal as saying they are, …a group of Facebook and Instagram spammers that present themselves as a digital marketing company, and whose activities were previously known to Facebook’s security team.
The reason the spammers want the information, according to
Wired
, has to do with the quality of phishing message that can be built with the granular data discovered in this breach. Whether the scammer is attempting to
blackmail the user
or just write a compelling spearphishing message, more data equals better results.
Responding to the latest news, Lawrence Pingree, executive vice president, product management, at SonicWall said, The sheer amount of user data and personal information that the Facebook spammers gained access to is staggering. Though organizations may feel heightened tension around threats from nation states, this is a stark reminder that equally nefarious and damaging action can be done by the more common spammer.
Related content:
Cybercrime-as-a-Service: No End in Sight
Lessons Learned from the Facebook Breach: Why Logic Errors are So Hard to Catch
7 Most Prevalent Phishing Subject Lines
Tuesday: Spammers Favorite Day of the Week

Black Hat Europe returns to London Dec 3-6 2018 with hands-on technical Trainings, cutting-edge Briefings, Arsenal open-source tool demonstrations, top-tier security solutions and service providers in the Business Hall. Click for information on the
conference
and
to register.

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
WSJ Report: Facebook Breach the Work of Spammers, Not Nation-State Actors