Zango Adware Phishing Worm Distributed via Quicktime Videos Hits MySpace

[mandy]

1) A new Myspace worm
2) Bad guys using HREF functionality available to Quicktime files
3) Hacked websites hosting fake Myspace login details
4) A pornographic website (linked to from various hacked profiles) that contains Zango content, as well as using a popunder to display more Zango videos.

Once again, Zango find themselves tangled up in something they'd probably rather not have anything to do with. As for Myspace, it really needs to think about banning Quicktime movies from their site until something can be done about the HREF feature being exploited in this fashion. This one is spreading rapidly, and something tells me the people behind this won't quit unless the strong financial motivation on offer is removed...

full article: http://blog.spywareguide.com/2006/12/mys...s_use.html

Yesterday, a metric ton of MySpace accounts were infected with yet another worm. As I predicted ten days ago, it was accomplished via a QuickTime embed. Visiting the profile of anyone infected would cause the navigation links across the top of your profile (Home | Browse | Search | Invite | etc…) to be replaced by fake navigation links which all linked to a spoof MySpace login page via some basic CSS and HTML added to your “About Me” section. And, the QuickTime embed was added to one of your “Interests” sections to further propagate this worm / phishing attack. At a glance, this looked like nothing more than that: a worm being used to phish MySpace passwords...

full article: http://www.ghettowebmaster.com/code/mysp...porn-worm/