The “Covert Redirect” phishing scam has been around for a long time, but scammers are now using it to harvest the email addresses and passwords that victims use to log in to their Facebook accounts.

The scam works like this: You visit a website and like what you see, but you are asked to either “Create a new account” or “Sign in using Facebook” before being allowed to see or do certain things with the site (leave a comment for example).  [Read more…]