There is a dangerous scam going around regarding the unreleased black stallion. People unknowingly post these links on their Facebook page. Well, I ALMOST fell for this one but I saw some clues that it was fake.
I clicked on the link and the first thing it asked me was to select that I “liked” the page, which I did.
Then it said to send the page to 40 friends. I began to get skeptical but my desire for the black stallion overran my doubt. I clicked on the link so I could select my friends to send it to and it brought me back to the SAME page I was on. That was a RED FLAG.
Then they had a link “click here to send it to your friends faster”. I clicked the link and it came up with Javascript code. It told me to copy and paste this code into my browser’s address window (where www.facebook.com is). I did not understand the Javascript code but knew that the “get” statements were referring to an entire address book. BUT there were other variables (e.g. “y”) that could have been defined as passwords.
Any time code is pasted into an area on a website that will receive information that is typed, it is called an “Injection”. In this case, that code is called “Javascript Injection”. This make it very dangerous to use because it will extract information from Facebook’s cache servers.
If you have any doubts about a site, send me the link and I will evaluate it for you.
Happy Harvesting!
I clicked on the link and the first thing it asked me was to select that I “liked” the page, which I did.
Then it said to send the page to 40 friends. I began to get skeptical but my desire for the black stallion overran my doubt. I clicked on the link so I could select my friends to send it to and it brought me back to the SAME page I was on. That was a RED FLAG.
Then they had a link “click here to send it to your friends faster”. I clicked the link and it came up with Javascript code. It told me to copy and paste this code into my browser’s address window (where www.facebook.com is). I did not understand the Javascript code but knew that the “get” statements were referring to an entire address book. BUT there were other variables (e.g. “y”) that could have been defined as passwords.
Any time code is pasted into an area on a website that will receive information that is typed, it is called an “Injection”. In this case, that code is called “Javascript Injection”. This make it very dangerous to use because it will extract information from Facebook’s cache servers.
If you have any doubts about a site, send me the link and I will evaluate it for you.
Happy Harvesting!
No comments:
Post a Comment