Feeds

'I like big butts and I cannot lie, hackers take Pinterest on a joyride'

So spammers say you're fat, well, we ain't down with that

Securing Web Applications Made Simple and Scalable

NSFWish Miscreants have made an ass out of users of bewildering photo-sharing website Pinterest – by hijacking their accounts to flood the boards with butt pics.

The cheeky spammers gained control of the profile pages by tricking victims into clicking on “Pin This” widgets on websites or running dodgy apps, all of which had malicious code hidden inside. The rump snaps were then pasted all over users' image boards to tout dubious weight-loss pills. Suffice to say, Pinteresters Pinners were pretty bummed out by the vandalism.

So it appears diet-pill spammers have moved on from joyriding the Twitter profiles of celebrities to the twee world of cats and cupcakes – it's an endorsement, of sorts, for Pinterest though not one the social network is likely to welcome.

In a statement this morning, US West Coast time, the website's team told The Reg its techies have got to the bottom of the problem, and are in the process of cleaning up the mess:

Our systems were alerted to some incidents of spam yesterday evening. These reports did not come in at a large scale, and we began working on cleaning up and placing the accounts in safe mode immediately. The accounts have since been secured.

We work hard to protect the security of Pinners. As part of that effort, when we see that compromised email credentials are being used in an attempt to gain access to Pinterest accounts, we immediately notify the at-risk Pinner and remind them to reset their password. The best precaution is to use a strong and unique password that is not used on other sites.

This graffiti, brought to our attention by TechCrunch, is not the first of its kind to hit the up-and-coming social network: earlier this month the US Better Business Bureau put out an alert urging users to not click on dodgy looking "pins" – the term Pinterest uses for a digital scrapbook images. Tips from Pinterest on account security can be found here. ®

The smart choice: opportunity from uncertainty

More from The Register

next story
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a Javascript vuln
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.