Facebook is the target of new phishing scams, which attempt to trick users to logging into FBaction.net and FBstarter.com, thereby handing over their passwords. (If you got taken in, don't feel bad — so did notorious social media fameball Rex Sorgatz!) Here's a screenshot of the scam in action, via The Next Web:

But wait, isn't that exactly what Facebook is trying to do on sites like Digg and The Insider and Gawker? Its Facebook Connect program is designed to let people use their Facebook logins on other websites. And the only way Facebook will ever make money is by getting users to share every last moment of their life. If the Facebookers were really doing their jobs, their users wouldn't have any private information left for phishers to steal.

If you need the joke explained, Moskovitz is making fun of a common tactic used by hackers: Sending fake messages which appear to come from an authority, in an effort to get people to give up their passwords. But he's got a backhanded point. If Facebook insists on using its own software to make major announcements, a fake Mark Zuckerberg has a decent chance of fooling a lot of the people, a lot of the time.

You get a Facebook message from a friend, urging you to check out this video. You go there, and it's a YouTube phishing site (with your friend's facebook profile picture and name on it), which then urges you to update your Flash player. Don't do it — it fucks up your computer and then spams all your Facebook contacts (not sure exactly how it does that). But it's interesting that hackers are now using a supposedly "trusted" messaging platform such as Facebook to launch attacks

If the hackers' method sounds familiar — a third party attempts to get a user to click based on what looks to be the endorsement of a friend — that's because Facebook tried the same idea with Beacon last year. And it's trying it again with Engagement Ads, a new format coming this fall.