MySpace Users Beware.

Arglaar · 4 Dec 2006

A New Worm is out there targeting MySpace accounts.

Original Article: http://www.securityfocus.com/brief/375

QuickTime worm uses MySpace to spread
Published: 2006-12-04

Security researchers warned over the weekend that a QuickTime worm written in Javascript had started to spread among MySpace users.

The worm, dubbed JS/Quickspace.A by antivirus firm F-Secure and JS.QSpace by security firm Symantec, uses an cross-site scripting flaw in MySpace to execute a Javascript program embedded in a blank QuickTime movie file. The worm redirects the user to a phishing page made to look like MySpace's login page.

"The case looked like simple MySpace phishing, but it wasn't obvious to us how the profiles were modified," Mikko Hyppönen, chief research officer for F-Secure, stated on the company's research blog. "After investigating a bit further, it seems that we have a MySpace worm on our hands, using a malicious Quicktime MOV file to spread."

MySpace users that give their credentials to the phishing site may find their account used for a spam attack that links to a pornographic movie site. Movies viewed on that site could result in Zango adware being installed on a victim's system, according to SpywareGuide.com.

The attack comes as security experts are increasingly warning about the dangers of sites that host user-created content. In particular, features of movie files that allow certain types of scripting have become a popular way to launch malicious software attacks. Web worms that use cross-site scripting flaws on sites such as MySpace are increasingly a worry.

MySpace could not immediately be reached for comment on the attack.
Click to expand...

Hagnn · 4 Dec 2006

I got hit with one of these. Not sure how serious it was but it was a backdoor trojan designed to sell you anti-virus software. Comes up as malware and says someone is looking at your passwords and stuff when in actuality it just directs you to anti-virus software when you get on a browser. Lame imo and took me a while to figure it out.

Log in / Register

Forums

MySpace Users Beware.

Arglaar

Hagnn

Share This Page