Facebook accounts compromised

So there’s a Facebook screenshot floating around in the Blogosphere depicting a woman with a very embarrassing status, as Mashable naively reports. Truth is, a Christian dating website was compromised by 4chan hackers and they used the information to take over the victims’ Facebook pages.

Screenshots

I’ll get right to it: below are some screenshots of other compromised Facebook accounts, posted by the hackers themselves. Some even have 4chan visibly open in another browser tab within the screenshots (which will open in a new browser window/tab).

1a0bq3.th Facebook accounts compromised Compromised Facebook Account, actually pretty humorous.
2mih2w.th Facebook accounts compromised Another Compromised account, NSFW-proofed
3dcauk.th Facebook accounts compromised Yet another one, this one being pretty twisted.
3wpdbc.th Facebook accounts compromised Okay, this one is actually pretty funny
18x8kv.th Facebook accounts compromised „Your teeth match your skin!“ – hilarious (although cruel)
d0qpl.th Facebook accounts compromised Warning: typical racist 4chan comments reside within

hqxh4.th Facebook accounts compromised

pepqzp.th Facebook accounts compromised More 4chan racism
pzvg7.th Facebook accounts compromised Another funny, non-racist comment, once again about teeth.
q6umm.th Facebook accounts compromised The one that started it all
yeul3.th Facebook accounts compromised NSFW-language in this post

More about the attacks

The unnamed Christian dating service I mentioned earlier had an exploit in the website that allowed the entire list of usernames and passwords for the site to be exposed. The files were then placed into “christian.txt” (seen in some of the screenshots), then posted on 4chan where they were spread amongst other hackers.

Not for certain, but I believe the use of the same password for both email and the dating service allowed the hackers, armed with the user database contents of the dating website, to enter the email accounts of the victims where they could retrieve a generated password recovery email from Facebook.

If this is the case, then Facebook may not have been the only target of the attacks, although it is certainly the most prominent. You can see Yahoo! email accounts open in background tabs in some of the fuller screenshots, as well as 4chan and the “Christian.txt” file listing the users.

Before we get in trouble…

We don’t condone hacking. I posted the screenshots because I thought I should elaborate the cause of the Facebook photo everyone has been talking about, but other than that I don’t find many of the attackers’ comments very funny, except for a few harmless non-racist comments such as the teeth insults.

In case my educated guess as to the cause of the attack is correct, let me say that I or anybody else here didn’t participate in the attacks. Honestly.

And finally, don’t do this. I’m sure these attacks caused many people a lot of grief, especially the more twisted suicide threats and others that may have caused law enforcement to get involved. It just isn’t funny at all, especially at that point.

That said, I hope everybody knows what really happened with this now. Don’t re-use passwords, and webmasters: sanitize your inputs. That’s all, folks.

About Stephen:

Stephen (last name kept private) is currently a student at the University of South Carolina with a major in computer science. He is very knowledgeable when it comes to current as well as up-and-coming software technologies, and is renown for his intuitive reviews of software products and services.

3 Comments

  1. gajic bojan wrote
    at 13:29 - 6th април 2010 Permalink

    can you hack me one facebook account pelase
    mail is: irena_2010@operamail.com
    name is irena bodiš
    thanks

  2. Treba Bodiš wrote
    at 2:12 - 7th септември 2011 Permalink

    Bravo skidam kapu, ovaj profil nikad nisam mogla da vratim u svoje vlasnistvo

  3. Irena Bodiš wrote
    at 2:13 - 7th септември 2011 Permalink

    Atebe sam nasla xaxa sad cu ja da se igram

Post a Comment

Your email is never published nor shared. Required fields are marked *