Security watchers have discovered a phishing attack targeting users of MySpace, the social networking website. The attack comes in the form of a hyperlink sent to potential marks in an AOL instant messaging message.

Users who follow the link are taken to a bogus website that spoofs the MySpace.com login page. The ruse is designed to fool users into handing over account information to crooks. Surfers duped into handing over this information are subsequently forwarded to the real MySpace.com website.

The MySpace phishing email is another example of how email fraudsters are widening their sights beyond traditional targets, such as eBay and high street banks, alongside moves to develop more sophisticated scams.

A screenshot of the bogus website and more information on the attack can be found in this WebSense alert. ®

Related stories

• Cybercrooks lurk in shadows of big-name websites (12 December 2007)
• Grifters find rich pickings on social networking sites (17 May 2007)
• MySpace sues Spamford Wallace (28 March 2007)
• Exclusive eBay goes hacker hunting in Romania (8 March 2007)
• Script wreaks havoc on MySpace (31 January 2007)
• AOL phishing fraudster found guilty (17 January 2007)
• In Brief Phishing worm hooks MySpace users (5 December 2006)
• Social sites' insecurity increasingly worrisome (5 December 2006)
• IE and Firefox blighted by fake login flaw (23 November 2006)
• Social Security phishing scam surfaces (9 November 2006)
• MySpace phishing scam targets music fans (14 October 2006)
• Samsung Telecom plays unwilling host to Trojan (8 September 2006)
• Barclays scripting SNAFU exploited by phishers (15 August 2006)
• Social sites a breeding ground for malware: report (10 August 2006)
• MySpace adware attack hits hard (21 July 2006)
• Networking sites could help hackers (14 July 2006)
• Gmail phishing email offers $500 prize (12 July 2006)
• Comment MySpace, a place without MyParents (3 July 2006)
• 1,000 Aussies caught in NAB phishing attack (19 June 2006)
• Billy Bragg prompts Myspace rethink (8 June 2006)
• Comment Why phishing catches punters (7 June 2006)
• In brief Teen hack suspects charged over MySpace extortion bid (25 May 2006)
• Interactive TV to capture MySpace generation (25 May 2006)
• MSN Billing Phisher jailed for 21 months (24 May 2006)
• Infosec Phishing goes international (26 April 2006)
• Why phishing reels punters in (31 March 2006)
• MS lawsuits aim to reel in phishers (20 March 2006)
• Phishing fraudsters offer cash reward (14 March 2006)
• AOL sues mystery phishers for $18m (1 March 2006)
• Police collar AOL phishing suspect (27 January 2006)