Elysian Shadows

If any of you have seen it so far, you'll know what I'm talking about.
It basically is a worm that spreads and posts to your friends to "verify" your Facebook.
Someone managed to get JS to post very cleverly through the Facebook Mobile app and a fbml ajax post call.

Here is a video of me talking about it if you're interested, pretty simple stuff in the JS file, but I figured I'd let people who aren't so code savvy know what it does too; just trying to get the word out.


http://www.youtube.com/watch?v=QcSAU16wjHQ

Just remember, to NOT click any links you see regarding verification of your account or anything simliar as shown in the video.

Thanks.

Wow nice explanation, thanks for the in-depth review. I'm not a javascript programmer, but that eval( call looked a-lot like lisp. Is there an eval() in javascript?

short wrote:Wow nice explanation, thanks for the in-depth review. I'm not a javascript programmer, but that eval( call looked a-lot like lisp. Is there an eval() in javascript?

Yes, there is. Basically his code was in a way "obfuscated" and the eval just runs that so it's normal JS.

Very interesting, I always love learning about how worms and malware work.