Another reason to stay out of MySpace

2muchcoffeeman · Jul 20, 2006

http://blog.washingtonpost.com/securityfix/2006/07/myspace_ad_served_adware_to_mo.html

Hacked Ad Seen on MySpace Served Spyware to a Million

An online banner advertisement that ran on MySpace.com and other sites over the past week used a Windows security flaw to infect more than a million users with spyware when people merely browsed the sites with unpatched versions of Windows, according to data collected by iDefense, a Verisign company.

Michael La Pilla, an iDefense "malcode" analyst, said he first spotted the attack Sunday while browsing MySpace on a Linux-based machine. When he browsed a page headed with an ad for DeckOutYourDeck.com, his browser asked him whether he wanted to open a file called exp.wmf. Microsoft released a patch in January to fix a serious security flaw in the way Windows renders WMF (Windows Metafile) images, and online criminal groups have been using the flaw to install adware, keystroke loggers and all manner of invasive software for the past seven months.

Internet Explorer users who visited a Web page containing this ad and whose IE was not equipped with the WMF patch would not get that warning. Rather, their machines would silently download a Trojan horse program that installs junk software in the PurityScan/ClickSpring family of adware. This stuff bombards the user with pop-up ads and tracks their Web usage. Only a little more than half of the anti-virus programs used at anti-virus testing service AV-Test.org flagged the various programs that the Trojan tried to download as malicious or suspicious.
Click to expand...

And the previous entry on that blog ...

http://blog.washingtonpost.com/securityfix/2006/07/myspace_pages_defaced_using_fl.html

MySpace Attacked by Flash Worm

A number of personal pages on the social networking site MySpace.com were attacked over the weekend using a security flaw in Macromedia Flash -- a flaw that Adobe released a patch to fix just last week. The worm spreads each time a MySpace user visits an infected user-profile page.

MySpace sent out a notice to all of its users late yesterday, saying the worm only appears to have affected people with vulnerable Flash players. Last week, Security Fix urged readers to upgrade their players to v. 9.0, noting that Adobe had fixed a flaw which could let bad guys hijack your browser if you were to merely browse a Web site that exploits the vulnerability.
Click to expand...

Nice.

Log in or Sign up

Another reason to stay out of MySpace

2muchcoffeeman Well-Known Member

Share This Page

Log in or Sign up

Another reason to stay out of MySpace

2muchcoffeeman Well-Known Member

Share This Page

Useful Searches