Locked Facebook spreading

[goldregister]

Introduction

The theory is the following:

1. We are going to make the victim open a page, promising a shocking video.

2. We are telling the victim that they need to be over 18 years old to watch this video, and if they are, click on the ’I am over 18’ button. 3. The button is nothing else than a simple .gif button, overlayed by a invisible like button, so when the victim clicks ont he button, they will post the link on their facebook without them noticing soon, allowing all his facebook friends to also fall into the trap.

4. Our victim is going to be redirected to the second part of our webpage, where the promised video is, but requires Java to be watched. The Java video is obviously our Java drive-by, which will silently run and execute the .exe ont he victim’s pc.

 

Getting started

 

1. Open up any .htm or .html webpage you have on your pc. I’ll be using video1.htm (included in the .rar file).

WARNING: If your filename’s extension is .html, change it to .htm (this will make sure we’re using .htm during the entire process).

2. So, now video1.htm is opened. This where it all begins. We have to come up with a special video title we promise, so people will actually click on it. It’s up to your creativity what you use, the better you can find out, the more victims you will have. Let’s use one of mine for this tutorial.

Title: Shocking!!! This man drank 2 litres of Pepsi, and this happened to him Description: This is why you should never drink too much of cola

3. Nice. This is actually a good one. Now you have to find an image, matching our title of course. Google up an image for ’man drinking cola’ or anything like that, pick an image, and copy the direct link of it.

4. Now in video1.htm, find the following part

This is the hidden content, please

• Sign In
• or
• Sign Up

5. Good, this will make facebook generate the news feed story with these parameters. Now look below the

tag, and replace the TITLE COMES HERE and DESCRIPTION COMES HERE parts with our title and description.

6. Find

and replace video2.htm with the name of your second page (we’re using video2.htm in this tutorial so if you’ll use this website template, just leave it video2.htm). This is the code, which will redirect the victim to the second page of our trap.

7. Now, since we do have a like button, we would obviously like to link it to our page. Find the code between the tags, and replace YOURLINKTOPAGEONE with your direct link to your video1.htm, so the victim will actually like your webpage when they click on the button.

8. Now, if you want to, open up logo.jpg in and image editor, and replace it with any image you’d like to be ont he top of the page (it doesn’t really matter anyway).

WARNING: Make sure you use the same dimensions (width and height) as the original image.

Setting up part 2

1. We are done with video1.htm and we’re going to make video2.htm. This page contains the Java drive-by basically, since our victim has already fallen into our trap by clicking the like button purposelessly.

2. Open up video2.htm in notepad, and find the following part:

This is the hidden content, please

• Sign In
• or
• Sign Up

Obviously, replace YOURDIRECTLIKTOYOUREXE with your direct link to your RAT.

WARNING: The direct link must start with http:// and must end with .exe

TIP: If you want to set a new webpage after the Java applet has been run, you can enter it in the part. If you don’t want to, just leave the value field blank.

3. Note that between the

and

tags, the title and description is default again, so you have to change it like you did in video1.htm (this is a new file after all, and you have to do the same modifications a few times than the previous one.)

TIP: Don’t use dropbox to store your file, else it’ll get detected.

4. You’re done! Upload your files to your host, and test it. Open your link to video1.htm, and click on the like button. If you did everything right, the story should appear on your wall, and people will most likely fall into the trap if you came up with a good title and description.

TIP: If the like button doesn’t work, go to

This is the hidden content, please

• Sign In
• or
• Sign Up

(Replace it with your link of course) and see if the button works there. If it doesn’t, go to

This is the hidden content, please

• Sign In
• or
• Sign Up

and enter your URL. It should tell you what the problem is with your page (there are a few specific cases).

Good job, you’re done! Wait and collect your bots, and harvest.

 

Tips: 1) Do NOT use free hosting, as almost all free hosts have been blocked by Facebook, therefore the "like" feature will not work. Spare a buck or two on some cheap paid hosting. 2) Use programs like FamousBook (Search on HF) to boost this method.

 

Download E-book and Tools

This is the hidden content, please

• Sign In
• or
• Sign Up