Beware: Fake Facebook App
[Update 2: The following app has been removed by facebook.]
[Update 1: The app invites all your friends, and likes the app automatically. It does not hack your account or cookie. Thanks Ahmud]
A perfectly crafted FaceBook app to hack your account. Here is URL: 10 lies girls ALWAYS tell guys! funny! (Do not follow instructions unless you want your account be compromised)
The app asks you to press <ctrl> + C, <alt> + D, <ctrl> + V and <enter> to paste a JavaScript in to your browser’s address bar. I don’t know what will happen next, follow the instructions if you want your account to be compromised :( .
JavaScript it pastes:
[The archived obfuscated JavaScript sample was removed from the database backup after an antivirus warning.]
The app has an hidden <textarea> with keyboard focus. When you press <ctrl> + C, its content gets selected and then you follow instructions to paste it in address bar! Never ever do that.
8 comments
I read it,its an very good blog which flash light on hacking.... IS this kind of SQL Injection???
Can you please tell me.... when I use the script that is hidden and which the users copy with the keyboard commands does not work on other pages? in other words... can you tell me if I can copy their work I am not going to use it for spam purposes with nothing after joining the group Thank you in advance
I do not know what the script does actually. Don;t ever do that (to hack others account), they will hunt you down :P . Note: you are not advised to copy paste java script into address bar and run it.
:) thanks for the advice :)
I managed to decode the Encrypted JS Line & Came to know that JS could not hack a facebook account nor any other ... It is used to select all your friends and invite them... And automatically Like the page. So it doesnt harm anybody at all. Hope you Understood ./Stateover
i read your post little late :(
Does any one knows how to create this application
ya..its good..& evry1 shud kw ths