: Are you aware of any client-side malware that sends lots of junk requests for .gifs? I am getting dozens of 404 errors on my site that are requests for gif's with apparently random names,

@Jessie594

It's new crimeware related to exploiting facebook.

eg,

<script>
function fbs_click() {
u=location.href;
t=document.title;
window.open('http://www.facebook.com/sharer.php?u='+encodeURIComponent(u)+'&t='+encodeURIComponent(t),'sharer','toolbar=0,status=0,width=626,height=436');
return false;
}
</script>
<a href="http://www.facebook.com/share.php?u=<url>" onclick="return fbs_click()" target="_blank"><img src="http://b.static.ak.fbcdn.net/rsrc.php/zAB5S/hash/4273uaqa.gif" alt="" /></a>


They're looking for some facebook images that are hashed names for stuff. If you look at that link it's the same namesake as a facebook gif. The crimeware is poorly written.

edit: it may not all be crimeware, just cruddy browser plugins. At any rate, more of these file names are on facebook dev sites. forum.developers.facebook.net/viewtopic.php?pid=254475

Vote Up Vote Down

@Angie530

Google appears to be aware of a few similar complaints.

Vote Up Vote Down