Below is a rather bland FarmVille phish that was brought to Sunbelt researcher, Christopher Boyd's attention, by a friend who had it posted to their Facebook account. The entire page is blank save for the fake login:
Nothing spectacular, I’m sure you’ll agree. However, he did a little digging around on the same URL and came across a large collection what the site claims are stolen Facebook logins dating from July right up to today:
Click to enlarge:
As far as numbers go (and accounting for the fact that there are some duplicates / clearly fake entries on there).
It’s entirely possible there are more of these account dumps out there, seeing as this one was numbered – worse, we’ve since found another dump which has some (but not all) of the same data posted to it along with logins not present in the first batch. The second site is registered to a Chinese email address, and doesn’t seem to be related to the “Facebook” logins so there may be numerous individuals having some fun here.
As always, be careful what you’re clicking on.
Source:
http://sunbeltblog.blogspot.com/2010/09/large-collections-of-stolen-logins-go.html