New Facebook Worm?

Random irrelevance that just didn't fit into other forums. Talk about anything.

Moderator: Talkative People

Post Reply
User avatar
LeonBlade
Chaos Rift Demigod
Chaos Rift Demigod
Posts: 1314
Joined: Thu Jan 22, 2009 12:22 am
Current Project: Trying to make my first engine in C++ using OGL
Favorite Gaming Platforms: PS3
Programming Language of Choice: C++
Location: Blossvale, NY

New Facebook Worm?

Post by LeonBlade »

If any of you have seen it so far, you'll know what I'm talking about.
It basically is a worm that spreads and posts to your friends to "verify" your Facebook.
Someone managed to get JS to post very cleverly through the Facebook Mobile app and a fbml ajax post call.

Here is a video of me talking about it if you're interested, pretty simple stuff in the JS file, but I figured I'd let people who aren't so code savvy know what it does too; just trying to get the word out.


http://www.youtube.com/watch?v=QcSAU16wjHQ

Just remember, to NOT click any links you see regarding verification of your account or anything simliar as shown in the video.

Thanks.
There's no place like ~/
User avatar
short
ES Beta Backer
ES Beta Backer
Posts: 548
Joined: Thu Apr 30, 2009 2:22 am
Current Project: c++, c
Favorite Gaming Platforms: SNES, PS2, SNES, SNES, PC NES
Programming Language of Choice: c, c++
Location: Oregon, US

Re: New Facebook Worm?

Post by short »

Wow nice explanation, thanks for the in-depth review. I'm not a javascript programmer, but that eval( call looked a-lot like lisp. Is there an eval() in javascript?
My github repository contains the project I am currently working on,
link: https://github.com/bjadamson
User avatar
LeonBlade
Chaos Rift Demigod
Chaos Rift Demigod
Posts: 1314
Joined: Thu Jan 22, 2009 12:22 am
Current Project: Trying to make my first engine in C++ using OGL
Favorite Gaming Platforms: PS3
Programming Language of Choice: C++
Location: Blossvale, NY

Re: New Facebook Worm?

Post by LeonBlade »

short wrote:Wow nice explanation, thanks for the in-depth review. I'm not a javascript programmer, but that eval( call looked a-lot like lisp. Is there an eval() in javascript?
Yes, there is. Basically his code was in a way "obfuscated" and the eval just runs that so it's normal JS.
There's no place like ~/
Bl@ck Ph@ntom
Chaos Rift Newbie
Chaos Rift Newbie
Posts: 16
Joined: Fri Feb 12, 2010 5:02 pm
Current Project: Topdown shooter
Favorite Gaming Platforms: PC
Programming Language of Choice: C++
Location: Ohio
Contact:

Re: New Facebook Worm?

Post by Bl@ck Ph@ntom »

Very interesting, I always love learning about how worms and malware work.
I am the great lurker! Fear my powers.
Post Reply