Zero-Day Exploit for sale, which claims to Delete admin of any Facebook page

အိႏၵိယ လူမ်ိဳး ဟက္ကာ တစ္ဦးျဖစ္သူ Varun ဆိုသူကမည္သည့္ Facebook Page ကိုမဆို admin အား delete လုပ္ျပစ္ႏိုင္သည့္ 0-day exploit အား ပညာရွင္မ်ား ၊ သုေတသန သမားမ်ား အတြက္ အားထားရာ website တစ္ခုျဖစ္ေသာ  http://1337day.com/ တြင္ ေဒၚလာ ၅၀၀၀ ျဖင့္ ေရာင္းခ်ထားသည္ကို ေတြ႔ ရွိရသည္။

Varun က သူ၏  exploit အတြက္  Youtube Video တစ္ခုျဖင့္ ရွင္းလင္းျပသထားခဲ့သည္။ ၄င္း ဗီဒီယို အတြင္း တြင္ admin မပါရွိသည့္ Facebook Page တစ္ခု မည္သို႔ျဖစ္သြားႏိုင္ပံု ကို တင္ျပထားေသာ လည္း  မည္သည့္ နည္းလမ္း သံုးထားျခင္းကို မႈ ျပသထားျခင္းမရွိေပ ။

Facebook ၏ ေပၚလစီ တစ္ခုအျဖစ္ page တစ္ခုတိုင္းတြင္ Admin တစ္ဦးအနည္းဆံုးရွိရမည္ျဖစ္ၿပီး Varun က admin မပါရွိေသာ Page အား screenshot ရိုက္ကာ သက္ေသထူျပခဲ့သည္။






၄င္းအျပင္ ထို exploit အားဖန္တီးသူ ဟက္ကာကပင္ ယခု exploit သည္ မည္သည့္ Page မွ Admin မ်ိဳးကို မဆို ကလစ္တစ္ခ်က္ႏွိပ္ရံုမွ်ျဖင့္ ဖ်က္ျပစ္ႏိုင္ေၾကာင္းေျပာၾကားခဲ့သည္။ ဒီအျပင့္ ေထာင္ေပါင္းမ်ားစြာေသာ Pages မ်ားမွ admin မ်ားရွိရာက္ုိ ညႊန္ျပႏိုင္ေသာ Bot သို႔  worm အျဖစ္ေျပာင္းလည္း သြားႏိုင္ေၾကာင္း လည္းေျပာျပခဲ့သည္။
ထိုသို႔ေသာ bug  မ်ိဳးသည္ Target အမ်ားစု အားျဖန္႔က်က္တိုက္ခိုက္ရန္အတြက္ေသာ္လည္းေကာင္း ၊ Single  Target အတြက္ ေသာ္လည္း ေကာင္း အသံုး၀င္သည္။ ရာေပါင္းမ်ားစြာေသာ Pages မ်ားျဖင့္စမ္းသပ္ထားၿပီး  ၁၀၀% ေအာင္ျမင္ေၾကာင္း အာမခံ ထားသည္။ ၄င္း bug ကို facebook ၏ security team မွလည္း patch မလုပ္ထားရေသးေၾကာင္း ဟက္ကာက ဆိုသည္။ exploit မည္သို႔အလုပ္လုပ္သည္ကို ရွင္းလင္းစြာ မသိရေသးေသာ္ျငား ေပါ့ထား၍ မရေပ ။ အကယ္၍သာ အမွန္ဆိုပါက Facebook မွ အျမန္ဆံုး fix လုပ္ပါေစရန္သာ ဆုေတာင္းရမည္ျဖစ္သည္။

Ref ; hackersnewsbulletin.com

t is possible to delete the admin of any page just with a single click.This can also be converted into a bot or a worm leading to the deletion of admin of thousands of pages.
It is also possible to fully automate this worm.It is very effective when we aim for wide spread attack.Targeted attacks are also possible.This bug is not available public.This bug is tested against hundred’s for pages and is found working 100%.
Hacker also claims that it is not yet fixed by Facebook security team.
Still it is hard to believe about the working of exploit, but we are not totally regretting it, in-case it is real, hope Facebook patches it shortly.
- See more at: http://hackersnewsbulletin.com/2013/12/zero-day-exploit-sale-claims-delete-admin-facebook-page.html#sthash.kMPsuUvn.bZN03i3X.dpuf

t is possible to delete the admin of any page just with a single click.This can also be converted into a bot or a worm leading to the deletion of admin of thousands of pages.
It is also possible to fully automate this worm.It is very effective when we aim for wide spread attack.Targeted attacks are also possible.This bug is not available public.This bug is tested against hundred’s for pages and is found working 100%.
Hacker also claims that it is not yet fixed by Facebook security team.
Still it is hard to believe about the working of exploit, but we are not totally regretting it, in-case it is real, hope Facebook patches it shortly.
- See more at: http://hackersnewsbulletin.com/2013/12/zero-day-exploit-sale-claims-delete-admin-facebook-page.html#sthash.kMPsuUvn.bZN03i3X.dpuf

t is possible to delete the admin of any page just with a single click.This can also be converted into a bot or a worm leading to the deletion of admin of thousands of pages.
It is also possible to fully automate this worm.It is very effective when we aim for wide spread attack.Targeted attacks are also possible.This bug is not available public.This bug is tested against hundred’s for pages and is found working 100%.
Hacker also claims that it is not yet fixed by Facebook security team.
Still it is hard to believe about the working of exploit, but we are not totally regretting it, in-case it is real, hope Facebook patches it shortly.
- See more at: http://hackersnewsbulletin.com/2013/12/zero-day-exploit-sale-claims-delete-admin-facebook-page.html#sthash.kMPsuUvn.bZN03i3X.dpuf