Thursday, December 7, 2006

Worm on MySpace may be on Your Space...

From PC Magazine, this story proves once again, that some of the most dangerous places on the Net are where the most people gather and have a lackadaisical attitude toward personal safety and PC Security...

Security Watch: MySpace Worm Spreads to Your Space

MySpace QuickTime Worm

Security Watch Top Threat
 

A worm is spreading on MySpace through a malicious QuickTime file which uses Apple QuickTime's Javascript support to exploit a vulnerability in MySpace revealed recently to change links in the user's profile to links to porn and phishing sites.

The user has to launch the QuickTime file in the QuickTime player in order for their space to be infected. The infected file is also injected into the user's MySpace profile, potentially infecting visitors computers and their own spaces. An increase in media file-based malware was one of the predictions made by McAfee's Avert Labs in a recent podcast.

You can check for an infected site by examining the links in the MySpace header, which has the links to "Home | Browse | Search | Invite..." etc. These links no longer point internally to MySpace but to different domains which host MySpace look-alike pages. If you visit the page in IE the QuickTime file is downloaded.


And so what do we do? Do you just avoid the most popular places on the Internet? Do you just never visit MySpace?

Well, that may be a great idea, but it's not realistic. Besides, I just added a MySpace for Boy Million so it can't be all that bad, right? Wierd Al Yankovic has a MySpace, so there is value somewhere in that mess, right?

Truth be told, there is no way you can always avoid the dangers...they are popping up more and more. There are regular security holes in Microsoft, like the current exploited issue in Word that MS STILL has not fixed. Maybe on the next scheduled security update...but I digress to a nother pet peeve of mine. 

MySpace is obviously a breeding ground for malware. I've already established that with previous posts here. But it's just as obvious that it's not going away or getting any less popular because of it. So you really need to get yourself protected as well as you can. INVISUS is my recommendation; let a team of experts handle your PC Security. They back it up with a money-back guarantee and a $25,000 ID Theft policy. That's where I put my money (even if it's only $15.00 a month!--actually, mine's free!).


Posted at 9:46 PM on Thursday, December 7, 2006




<- Last Page | Next Page ->