Wife clicked dodgy link, phishing?

[extraT]

Wife was browsing Facebook on her iPhone, when she saw a post a family friend had been tagged into, “sorry for your loss” blah blah blah and there was a link with a video, which she clicked. It then asked her to download “Sensor VPN”, It asked her to log into Facebook, which she tried but it didn’t work. She didn’t know her Facebook password (she has so many and just tried one before giving up).

Ican’t get a straight answer on if it was from the App Store or not. Nothing in purchase history, but I have already deleted the app (so might not show(?))

Any ideas on what to do here? Besides change password?

Thanks in advance.

Edited by extraT on Thursday 20th June 20:24

[eein]

As she failed to log on to facebook it's *probably* ok. However I'd suggest:
- On a separate computer log on to facebook and in addition to changing the password also log out of all devices and remove all permission for facebook log on to other apps or websites.
- run any phone virus or malware checks (I'm not sure what iphones have for this). Only use built in functions for this, do not download a random app s it's probably dodgy too.
- There;s various protections for this, but if you're worried (or rich) then also change passwords of any banking apps.
- If you're still worried do a full factory reset on the phone and set it all up again. And manually, not from some apple magic backup restore.

[durbster]

Do you know what asked her to log into Facebook - was it definitely Facebook, or was it another website that looked like Facebook that she's now typed her FB password into?

Always best to change the password asap just in case, and make sure 2FA is enabled.

[wyson]

Um, unless she has jail broken her iPhone, you can only download from the app store. Probably nothing to worry about, especially as she put the wrong password in.