Once the wannabe hacker has provided his credentials they are sent back to the operator behind the scam. Of course, the wannabe hacker that intends to hack his friend’s account needs to provide his Facebook login credentials. One of the tools used by the crooks allows an attacker to send to the wannabe hacker a Google Drive link that takes them to a “Facebook Friend’s Account Hacker” document. Hackers abuse the web publishing functionality included in cloud services like Google Drive. “We haven’t checked on other cloud services or standard domains.” added Sood. “It’s hard to list the numbers, but we have discovered multiple instances on Google Drive at the moment,” Sood said. Links to several Facebook Hacker tools were being actively distributed and shared on Google Drive. Experts at BCECTL discovered similar attacks by analyzing the files hosted on Google Drive.
