Does Facesnoop Really Hack Facebook Accounts?

Newsfeed

Nachrichtenbote
We came across a supposed hack-tool called "Facesnoop" this week.

The author uses YouTube videos to promote his software.

Facesnoop_01_YouTube1.png


Facesnoop 2 was released sometime recently and claims to have "ACTUAL video proof" that it works.

Facesnoop_02_YouTube2.png

(ACTUAL must be better than actual.)

The video depicts the "hacking" of an account belonging to a young woman named Kristen.

Facesnoop_03_Kristen.png


We think Kristen is just a sockpuppet account, so we've blurred the profile picture.

Once you've watched the Facesnoop video, and decide to download, you're directed to a webpage at ShareCash.Org which prompts you to fill out Cost Per Action (CPA) affiliate marketing surveys. (Offers from many of the usual CPA suspects. This is how Facesnoop monetizes his software.)

There's a problem though.

This is what happens when you launch Facesnoop 2:

Facesnoop_04_GUI_error.png


You get an "Unhandled Access Violation" exception that claims there is a "Net Framework 2.0 missing library". Most people probably click on the "Check For Updates" button at this point, and that opens a webpage requesting even more CPA surveys to be filled out.

Facesnoop's Facebook page has several complaints about this.

Facesnoop_05_Facebook_Page1.png

(Seriously, who complains about a Facebook hack-tool failing to work on a Facebook Page???)

The Facesnoop author has created a newer page, and it opens to the Info tab to avoid visible complaints.

Facesnoop_06_Facebook_Page2.png


All of the people complaining about the error shouldn't really be surprised though…

Examining the properties of the executable shows that it was designed to fail.

Facesnoop_07_InternalName.png


Look: the Internal Name of the file is "Facesnoop 2 error.exe".

This isn't a hack-tool — it's a fraud-tool.

You can see more details in the executable's code:

Facesnoop_08_Hiew.png

(SHA-1: 2862de8e506414589b923f8faa49bf8fc81238e2)

E:\Nicolas\Code\fn2 error\Facesnoop 2 error\…

Nicolas? Hmm, where have we seen that name before?

Oh yes, the first video's sockpuppet "victim" was called Hayley.

Facesnoop_09_Hayley.png


And the Hayley account has a friend named Nicolas.

Facesnoop_10_Nicolas.png


And the Nicolas account just happens to "like" Facesnoop. Is it the hack-tool author himself?

We don't know for sure.

All we do know, whomever Nicolas is really… he thinks you're a sucker.






On 10/06/11 At 03:06 PM

Weiterlesen...
 
Zurück
Oben