Unmasking a fake Facebook hack

Hello, Marcelo over here! Today's post will be a bit different from what we are used to on the blog, and that is that a few days ago while I was on Facebook, I received 3 notifications from friends who had mentioned me through comments, a situation that surprised me, Well, I have very little conversation and interaction with them on this social network. So with great curiosity I go on to review the reason for the mention and Oh surprise! I was not the only one mentioned, but the entire list of friends of each of them in a blatantly spam post, of which unfortunately they were victims (and until now a person who mentioned me or has not found out, there is his mention) ...

In the following screenshot I show you this publication.

How viral! Only by reading it you can intuit that it is a fake facebook hack and not from elixir-magic-almighty that promises to be. Note that the date of this publication is from Winners will be announced in March, and there are still users who fall and believe in this type of deception that is becoming more and more common in «Fakebook«, yes, with k and not c.

Here is another related screenshot, where it is supposedly shown that using this method, it is possible to hack Facebook. It is obvious that it is more fake than an .exe image 😆

Snooping the code of the alleged hack

The publication of the user from Alexandria (Egypt) -according to his profile- had a link that he sent to a blog hosted on Blogger, where the following instructions and steps to follow in perfect Spanish were found (something strange smelled there):

1. Copy a code (written in JavaScript).
2. Go to the victim's profile.
3. Run JavaScript console, with F12 or inspect element.
4. Paste the code from step 1 and press enter.

In case it was not clear, there was a link to a YouTube video, this time with a woman's name and without a photo, where the procedure to follow was taught. (The smell of suspicion up to here was stronger).

What would happen if the user performed these steps?

Began to automatically mention all your contacts in that post, even if they don't know it, unless a friend tells them or checks their activity log. But there is something beyond this that has a dark purpose ...

Reviewing the code, which was obfuscated by the way, I found several lines of code that confirmed my suspicions, including the POST requests y cookie sendings, which allow me to affirm the following, which is what the code actually does:

1. Like fanpages
2. Subscribe to profiles of other users
3. SPAM

There is no doubt that this is a good cunning more than Social engineering, hack facebook It is something that many will try at all costs without anticipating the personal risks that this implies and if something suddenly appears as an 'easy trick', there will be more and more users who will try it and it will grow like a plummeting snowball.

The recommendation is simple, do not believe in posts like “Hack Facebook”, “Change the color of the biography” and other hoaxes that will surely appear. The common sense It is the best defense weapon, suspicion, investigation that costs nothing and that can avoid severe headaches. Better safe than sorry 😉

Certainly there will be more variations of this code, if the next time you come across these types of posts, report them as the first action and skip ahead, let Facebook take care of the hard work for you.

Was this post useful to you? Well come a +1 and share it on your social networks 😀