About: FBHole

Description
Metadata
Settings
- owl:sameAs
- Inference Rule:

About: FBHole Sponge Permalink

An Entity of Type : owl:Thing, within Data Space : 134.155.108.49:8890 associated with source dataset(s)

The message that the worm posts is "try not to laugh xD . com/omg/allow.php?s=a&r=[random number]" If you follow the link, you end up on a page that looks like this: The page shows a fake error message. If you click anywhere on the page, you will trigger a script that will try to post the same message to your Facebook wall. This is done with an invisible iframe that follows your mouse around — causing you to click on an invisible "publish" button. In addition to the wall message post, nothing else happens.

Attributes	Values
rdfs:label	FBHole
rdfs:comment	The message that the worm posts is "try not to laugh xD . com/omg/allow.php?s=a&r=[random number]" If you follow the link, you end up on a page that looks like this: The page shows a fake error message. If you click anywhere on the page, you will trigger a script that will try to post the same message to your Facebook wall. This is done with an invisible iframe that follows your mouse around — causing you to click on an invisible "publish" button. In addition to the wall message post, nothing else happens.
dcterms:subject	Worm Internet worm Social networking worm
dbkwik:malware/pro...iPageUsesTemplate	dbkwik:resource/JZK7RwE-9uTp7P-hk7qJrA== dbkwik:resource/52BSSNswG1v9pPlPEJj3hg== dbkwik:resource/BD-jDlXrYtqGXVW_GpZ_aA==
abstract	The message that the worm posts is "try not to laugh xD . com/omg/allow.php?s=a&r=[random number]" If you follow the link, you end up on a page that looks like this: The page shows a fake error message. If you click anywhere on the page, you will trigger a script that will try to post the same message to your Facebook wall. This is done with an invisible iframe that follows your mouse around — causing you to click on an invisible "publish" button. In addition to the wall message post, nothing else happens. The worm is spreading like wildfire. To get some idea, try this public search via youropenbook.org. We have blocked domain fbhole.com so that F-Secure Internet Security users cannot access it. The domain was registered yesterday and it points to an IP address in Czech Republic, shared by another Czech site called ironbrain.net. Updated to add: Domain fbhole.com shared an IP address with ironbrain.net [82.208.32.99]. Ironbrain.net hosted a website with references to Facebook but no obvious illegal content. While fbhole.com was registered with privacy protection, ironbrain.net had contact information in the WHOIS database, complete with a Czech phone number.

OpenLink Virtuoso version 07.20.3217, on Linux (x86_64-pc-linux-gnu), Standard Edition
Data on this page belongs to its respective rights holders.
Virtuoso Faceted Browser Copyright © 2009-2012 OpenLink Software