Malware delivered via AJAX expected to become increasingly common

[mandy]

Malware attacks created using emerging Web development tools such as AJAX are expected to begin showing up more frequently, as writers of malicious code match the skills of their legitimate counterparts.

With the arrival of the Yamanner virus targeting Yahoo Messenger on June 13, industry analysts and security software vendors say the era of what might loosely be called Web 2.0 threats has arrived...

The Yamanner worm uses AJAX to amplify and cloak delivery of its payload as it attempts to exploit a vulnerability in Yahoo Messenger's JavaScript code...

full article: http://www.eweek.com/article2/0,1895,1978119,00.asp

[rose]

"These are just the first examples of insecurities for Web 2.0, but JavaScript is pretty popular and it doesn't have the best reputation in regards to security,"

Which means the fun has just begun.  :