iGuRu.gr has detected a targeted attack on Facebook pages, which is currently taking place through the social network.
A notice shown to page administrators claims to come from Meta and states that the page violates the social network's terms of service.
The pages included in the above notice are as follows:
Pages that violate service
Foxbox.gr
Strawberry
Frezoskal Agricultural Machinery
Tsakas Studio
Gaming GR
Geekmall.eu English
Sunglasses
Gialla Vespa
Giannetos Kalamata
Guinness Garments Agency
GITI Tires – Greece
GG Store
Global Trips
Gnisio Service Ford
Godkeys
The Collector's Corner
Good Design Awards
HireMe
WATCH TV FOR FREE from facebook
Weather WEB TV
Greek weather forecast
Green Cars
Green Pharmacy of Southern Peloponnese
Greatwall automotive parts Co.Ltd
Trailers – Towbars – Trunks
Hackers JEANS
HAKA Shoes
Halepa Hotel
Hans Boodt Greece
Harman Kardon Greece
Greek History and Prehistory
Hellenic DNA
Hilandar Wines
Home-shop
Homestic
Hondros John Deere Service
Horizon Mills
HostingB2B
HotSale.gr
Huawei Fans – Greece
Sound cell Car audio and Accessories
Sound of the South
Hydropac
iEidiseis.gr
iGuRu.gr
ibicor.com
Aquarius
idealeyes.gr
Current events
Ierosolymitis Travel
The link contained in the notification is of course malicious as you can see below:
The real link behind cutt.ly is pagerecovery4nd23984businessrestrictedas.co.vu
PING pagerecovery4nd23984businessrestrictedas.co.vu (141.136.35.228) 56(84) bytes of data. 64 bytes from 141.136.35.228: icmp_seq=1 ttl=37 time=80.4 ms 64 bytes from 141.136.35.228: icmp_seq=2 ttl=37 time=80.3 ms 64 bytes from 141.136.35.228: icmp_seq=3 ttl=37 time=80.4 ms 64 bytes from 141.136.35.228: icmp_seq=4 ttl=37 time=80.3 ms 64 bytes from 141.136.35.228: icmp_seq=5 ttl=37 time=80.3 ms --- pagerecovery4nd23984businessrestrictedas.co.vu ping statistics --- 5 packets transmitted, 5 received, 0% packet loss, time 4005ms rtt min/avg/max/mdev = 80.353/80.395/80.493/0.314 ms
Organization: Hostinger International Limited
ASN IP Range: 141.136.34.0/23