07/05/2023
Social Media Security!!!
Kabarak University is not the first institution/public figure in the country to loose access to their social media accounts. Previously, the same has happened to the Office of the Director of Public Prosecution, Bomet Women Representative, Pickup Mtaani, Nick Ruto, Joyce Wamama, Avril Kenya and Nameless among many others.
"Hackers" mostly achieve this using pysops to manipulate their targets. For instace, someone targeting your facebook account will send a message claiming to have added you as their recovery contact and a certain code has been sent to you. You end up giving the code not knowing that the code is for resetting your profile account password. Once they are logged in, they change your details including the primary email, phone number and two factor authentication. The recovery contact claim is just one of the strategies they use, others include free wifi and paid advertisements subscriptions.
For pages, administrators are mostly social engineered with irresistible advertising gigs. This is however just a trick to add them as an admin in your Meta business Suite(BS) or to add your page into their business manager. Once you add them as admin in your Meta BS, they add the page to their business manager and remove all the other administrators of the page. The same also happens when you add the page to their Meta BS.
If your facebook profile account is hacked and it has an ad account linked to it, the hacker can use the credit or debit card linked to your ad account to run ads amounting to hundreds of thousands. The hacker can also opt to take control of linked pages if there are any.
Staying woke is the only solution to social media security. If a facebook friend contacts you claiming to have added you as their recovery contact, contact them in person since their account might be compromised.
For facebook advertisements gigs, especially if such deals are coming from foreigners through an email or phone number address that you have added to your page, resist such deals or do some background check on the advertisers claims before accepting the deal.
Else you can contact Next Mile Digital for consultancy, social media management or audit.