Facebook Hacked By 4chan, Accounts Compromised

So there’s a Facebook screenshot floating around in the Blogosphere depicting a woman with a very embarrassing status, as Mashable naively reports. Truth is, a Christian dating website was compromised by 4chan hackers and they used the information to take over the victims’ Facebook pages.

Screenshots

I’ll get right to it: below are some screenshots of other compromised Facebook accounts, posted by the hackers themselves. Some even have 4chan visibly open in another browser tab within the screenshots (which will open in a new browser window/tab).

Compromised Facebook Account, actually pretty humorous.

Another Compromised account, NSFW-proofed

Yet another one, this one being pretty twisted.

Okay, this one is actually pretty funny

„Your teeth match your skin!“ – hilarious (although cruel)

Warning: typical racist 4chan comments reside within

More 4chan racism

Another funny, non-racist comment, once again about teeth.

The one that started it all

NSFW-language in this post

More about the attacks

The unnamed Christian dating service I mentioned earlier had an exploit in the website that allowed the entire list of usernames and passwords for the site to be exposed. The files were then placed into “christian.txt” (seen in some of the screenshots), then posted on 4chan where they were spread amongst other hackers.

Not for certain, but I believe the use of the same password for both email and the dating service allowed the hackers, armed with the user database contents of the dating website, to enter the email accounts of the victims where they could retrieve a generated password recovery email from Facebook.

If this is the case, then Facebook may not have been the only target of the attacks, although it is certainly the most prominent. You can see Yahoo! email accounts open in background tabs in some of the fuller screenshots, as well as 4chan and the “Christian.txt” file listing the users.

Before we get in trouble…

We don’t condone hacking. I posted the screenshots because I thought I should elaborate the cause of the Facebook photo everyone has been talking about, but other than that I don’t find many of the attackers’ comments very funny, except for a few harmless non-racist comments such as the teeth insults.

In case my educated guess as to the cause of the attack is correct, let me say that I or anybody else here didn’t participate in the attacks. Honestly.

And finally, don’t do this. I’m sure these attacks caused many people a lot of grief, especially the more twisted suicide threats and others that may have caused law enforcement to get involved. It just isn’t funny at all, especially at that point.

That said, I hope everybody knows what really happened with this now. Don’t re-use passwords, and webmasters: sanitize your inputs. That’s all, folks.