Feeds

Pink Floyd worm spreads on 'Chinese Facebook'

Wish You Weren't Here

Intelligent flash storage arrays

Malware authors have developed a cross-site scripting worm that's spreading across a Chinese social networking website.

The Pinkren-A worm poses as a video clip of Pink Floyd's Wish You Were Here contained in messages sent to users of Renren, the Chinese social networking website with around 40 million members. Selecting these messages results in the execution of malicious JavaScript, further spreading the infection.

"The technique used in this worm exploits a simple XSS hole in the website - with a payload which has a flash component with the AllowScriptAccess=”always” attribute to allow the above “non-malicious” javascript to spread the worm via renren.com’s API," explains Sophos researcher Boris Lau in a blog posting.

Preliminary analysis suggests Pinkren-A simply spreads across the Facebook-like site without doing anything more malicious.

The techniques applied by the worm are similar to those of the Mikeyy worms that spread rapidly across microblogging site Twitter earlier this year and an Orkut worm in 2008. Orkut isn't popular in the US or Europe, but the Google-owned social networking site is big in Brazil and up and coming in India. ®

Top 5 reasons to deploy VMware with Tegile

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.