New Facebook Worm?

[LeonBlade]

If any of you have seen it so far, you'll know what I'm talking about.
It basically is a worm that spreads and posts to your friends to "verify" your Facebook.
Someone managed to get JS to post very cleverly through the Facebook Mobile app and a fbml ajax post call.

Here is a video of me talking about it if you're interested, pretty simple stuff in the JS file, but I figured I'd let people who aren't so code savvy know what it does too; just trying to get the word out.


http://www.youtube.com/watch?v=QcSAU16wjHQ

Just remember, to NOT click any links you see regarding verification of your account or anything simliar as shown in the video.

Thanks.

[short]

Wow nice explanation, thanks for the in-depth review. I'm not a javascript programmer, but that eval( call looked a-lot like lisp. Is there an eval() in javascript?

[LeonBlade]

Wow nice explanation, thanks for the in-depth review. I'm not a javascript programmer, but that eval( call looked a-lot like lisp. Is there an eval() in javascript?

Yes, there is. Basically his code was in a way "obfuscated" and the eval just runs that so it's normal JS.

[Bl@ck Ph@ntom]

Very interesting, I always love learning about how worms and malware work.