The worm was a huge success, McGeehan said, both in terms of employee responsiveness and as a way to test and refine the tools and policy systems Facebook uses for reporting suspicious activity: We launched a worm to simulate some of the spam campaigns we see on Facebook and other sites, and this was our grand finale.