A Polish security researcher has published details and proof-of-concept code that could be used for creating a fully functional Facebook worm.
(I remember, way back when, other Facebook worms. As I recall, those used the Facebook apps system. But there were other technologies abused for other worms ...)
............
Other posts: https://community.isc2.org/t5/forums/recentpostspage/user-id/1324864413
This message may or may not be governed by the terms of
http://www.noticebored.com/html/cisspforumfaq.html#Friday or
https://blogs.securiteam.com/index.php/archives/1468