Online Threat Alerts (OTA)
An anti-cybercrime community alerting the public.

Hackers Gaining Access to Social Networking User Accounts Using Self XSS Scams

Hackers have found a new way of tricking social networking users into injecting or placing malicious JavaScript or client-side code into their web browsers, which will allow the same hackers to gain access to their victims’ accounts and use it for fraud, to send spam, to post the same or other scams to their victims’ friends.

Advertisements

This type of trickery or scam is called Self XSS, where XSS means Cross-site Scripting.

A Self XSS Scam Used by Hackers

Hack any Facebook account following these steps:

1. Go to the victim’s profile
2. Click right click then click on inspect element and click the “Console” tab.
3. Paste the code into the box at the bottom and press Enter.

The code is in the web site: http://textuploader.com****/

Good luck: *

Don’t hurt anybody…

The scam above was posted on popular social networking website Facebook, and was created by hackers or cyber-criminals to trick Facebook users into pasting or injecting malicious code into their web browsers, by claiming that they can hack any Facebook account if they follow some simple steps.

But, the code the hackers are asking you to paste into your web browser, will not allow you to hack anyone’s account, it will only allow the cyber-criminals to hack your account.

The code that they (hackers) are asking you to paste into your web browser will allow them to gain access to your Facebook account, steal your account username and password by taking you to fake websites and then ask you to sign-in.

There are so many illegal things that these hackers can do once they have tricked you into pasting their malicious client-side code into your web browser.

So, remember there are many other scams similar to the one above and you should never paste, insert, or inject code into your web browser.

In order to trick you into pasting or injecting code into your web browser, cyber-criminals will ask you to do one or more of the following, depending on the web browser that you are using:

Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Share this article with others.
Advertisements
Write / View Comments (0)
View on Online Threat Alerts (OTA)
Help Maintain Online Threat Alerts (OTA)