today's FB's 'mention'-attack [Archive] - RCE Messageboard's Regroupment

evaluator

December 4th, 2015, 09:15

in FB notification are false 'mention', pressing does redirects to different locations. for mobile it redirects to virus alert+install somthing

//www.bit.ly/1RsgLiF?fb_comment_id=769564989839959_769564999839958&comment_id=769564999839958
>>
//www.tinyurl.com/qx4h9wd

Code:

<!doctype html>

<html class="no-js" lang="">

<head>

<meta http-equiv="content-type" content="text/html;charset=utf-8">

<title>Redirecting</title>

<meta http-equiv="refresh" content="1; url=http://0x258B09BA/469331867">

<style>

.loader,.message{text-align:center}.interstitial{margin:0 auto;width:500px;vertical-align:middle;top:200px;padding-bottom:20px;padding-top:10px;background-color:#fff;border-radius:20px;position:relative}.loader{font-size:18pt}.message{font-size:10pt}.larger{font-size:40pt}body{background:url(data:image/jpg;base64,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)}</style>

</head>

<body onLoad="location.replace('http://0x258B09BA/469331867'+document.location.hash)">

    <div class="interstitial">

      <div class="loader">

        

        <span id="grow0">≡ƒìæ</span>

        

        <span id="grow1">≡ƒÄê</span>

        

        <span id="grow2">≡ƒî▓</span>

        

        <span id="grow3">≡ƒì¢</span>

        

        <span id="grow4">≡ƒö«</span>

        

        <span id="grow5">≡ƒìû</span>

        

        <span id="grow6">≡ƒìë</span>

        

        <span id="grow7">≡ƒÄë</span>

        

      <div class="message">Redirecting you to... <u>http://0x258B09BA/469331867...</u>`</div>

    </div>

  <script>

    var total = 8;

    function animate(which, add) {

      for (var i = 0; i < total; i++) {

        document.getElementById("grow" + i).setAttribute("class", "";

      };

      document.getElementById("grow" + which).setAttribute("class", "larger";

      which += add;

      if(which >= total - 1 || which <= 0) { add = add * -1;}

      setTimeout(animate, 150, which, add);

    }

    animate(0, 1);

  </script>

</body></html>