Join the WebProWorld Forum!

Beware of New MySpace Malware


Don't Get Fooled. That's not from Microsoft

Security Watch is reporting a new MySpace security issue that could reasonably make someone's day unhappy. The idea behind the hack is to send an authentic looking patch from Microsoft to a person's computer, once they have clicked on a link to view a person's profile.

Once installed and run, it opens a back door on the compromised machine and proceeds to download more down loaders, Trojans and a remote control tool from multiple servers. The downloaded files are coming from servers located in Malaysia and the Ukraine. McAfee has notified both MySpace and Microsoft but, at the time of writing, the booby-trapped MySpace profile was still live and serving up the malicious file. Source: Security Watch
Always fun, and yet another reason to be careful when using social networks anywhere, not just at home but on the corporate networks as well.

When the article was published, MySpace had not fixed the issue, odds are very likely that they will be doing so in the future if not today as news gets out. The problem is in distribution of information, not everyone who uses MySpace reads cool security blogs or security news sites. Odds are most likely that there are going to be a significant number of people running around with compromised computers.

View Image

Comments

Digg This! StumbleUpon This!
AddThis Social Bookmark Widget

About the author:
Dan Morrill has been in the information security field for 18 years, both civilian and military, and is currently working on his Doctor of Management. Dan shares his insights on the important security issues of today through his blog, Managing Intellectual Property & IT Security, and is an active participant in the ITtoolbox blogging community.