This is a very serious threat that one has implemented with a use of php and a perl script, since php script is obviously hidden into the server, it is hard to check what the programmer has actually done, so that facebook owner can rectify and block this as soon as possible.
If Any one of you find anythin like this, please report it to the facebook report abuse terms.