According to a blog post by Symantec, one of the spam video is going viral on Facebook which claims to allow you to get your friends’ log in credentials, but in real it hacks your own account.
This Video has seen by many Facebook users and they have been made fool, video claims to offer you a tool to obtain credentials for friends’ accounts, said Satnam Narang, security response manager for Symantec, in blog post.
That’s it, after executing the code, you Facebook account has been hijacked to like other pages on facebook whcih is likely to be spam or scam like this and also being used by some hackers to earn money and deliver likes and followers for pages.
The scam recorded a good result last year, it was used to inflate the “like” count on some pages by 50,000 to 100,000, Narang wrote.
These type of attacks knows as “self cross-site scripting,” where user is tricked through various techniques to insert the malicious codes.
“Being able to hack someone’s Facebook password by just pasting some code into your browser sounds way too easy and should signal that this is a scam,” narang wrote. “It’s best to err on the side of caution and think twice before following instructions that ask you to paste code into your browser to hack passwords or unlock features on a website.”