Facebook Build Pages Striking Yesteryear Malicious Links,Huge Pages Compromised Yesteryear Spam

We’ve simply received virtually a one-half dozen rapid burn tips all showing the same thing: the Facebook app Sendible compromised inward a major way.

It appears that several of the largest Facebook Pages including Google, Coca-Cola, YouTube, South Park, The Daily Show, Team Coco too others are at nowadays sending out a malicious link to all of their followers that reads “Change Your Facebook Background Here!” Obviously, don’t click on it.

A few people who did click on the link reported that it took you lot to a page exterior of Facebook that asks you lot for around data virtually you. The bottom of the page reads “Powered By AWeber Email Marketing”.

The weirdest business office is simply how many other Facebook users are “liking” these links.

We’ve contacted Facebook virtually the upshot too volition update when nosotros take away heed dorsum from them. But these accounts compromised seem to advise that this link is showing upward inward tens of millions of feeds right now.

And it looks similar most of the malicious links have got at nowadays been taken down. But to a greater extent than tips are coming inward that the assault is ongoing too other links driblet dead on popping up. Still no give-and-take all the same from Facebook on the incident.

From Mazy Kazerooni:

The Sendible hack striking Lil Wayne’s Facebook page (15 MM fans). I’m an admin, blocked the app. They tried to post multiple times

And at nowadays Sendible is saying it wasn’t them that was hacked, instead this may live a Facebook safety exploit:

Just to clarify, Sendible was non hacked. One of our users has discovered a major flaw inward Facebook’s security.

 Facebook has lastly responded inward full:

We’ve looked into this more. We began removing the posts at nowadays upon discovering them too before long afterward they were made. They were caused past times a temporary põrnikas on Facebook that allowed sure as shooting posts requested past times an application to live rendered when they shouldn’t have. There was a flaw inward Sendible’s API telephone phone that caused Sendible to incorrectly asking that posts users had intended to brand on the Walls of Pages they liked live rendered on behalf of those Pages themselves. This põrnikas caused those requests to larn through. Upon discovering the bug, nosotros at nowadays began locomote to cook it. It’s at nowadays been resolved, too these posts tin dismiss no longer live made. Sendible has also fixed the flaw on its end. We’re non aware of whatever cases inward which the põrnikas was used maliciously.

Share This :