Orkut worm feeds on scraps
From social networking to social engineering
Regcast training : Hyper-V 3.0, VM high availability and disaster recovery
Malware authors have written a worm for Orkut, Google-owned networking site that's big in Brazil.
The Scrapkut worm uses active code injection to spread between victims and their friends on Orkut. The malicious code appears on a victim’s scrapbook, containing a link to a supposed YouTube video.
People who click on the link are redirected to an external site hosting malware that's disguised as a Flash upgrade. Users duped into installing the software get malicious Javascript code injected into their next active Orkut web session. This malicious scrapbook entry is then sent to all the victims' friends, recommencing the infection cycle.
An analysis by Symantec can be found here.
Judging by the counter on a web page associated with the malware (not the most reliable of indicators) about 13,000 users are already infected by the Scrapkut worm, which isn't - for now - doing anything particularly nasty other than spreading.
By contrast an earlier worm that spread across the Orkut network last December infected an estimated 655,000 people. Google plugged the cross-site scripting (XSS) error that made the attack possible hours later, thwarting tfurther propagation of that fast-spreading worm. ®
COMMENTS
Any particular platform at risk?
I take it this is Windows only, as per?
Paypal irresponsibility
Well, everyday a new big hack/spam attack.
Companies should take more care about web application security, seems like many people still believe a good firewall could solve all their security problems, if companies would use a web security scanner (i.e. maui security scanner), hackers and spammers couldn't abuse their websites/servers so easy.
IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
