Hacked MySpace page serves up fake Windows update
95181
There&#39;s now one more reason to be security-conscious while using MySpace.com: fake Microsoft updates.Using a hacked MySpace profile, online criminals are trying to trick victims into downloading a malicious Trojan Horse program by disguising it as a Microsoft update, according to researchers at security vendor McAfee.The attack is certainly not widespread -- McAfee has seen it used on only one MySpace profile -- but it does show how sites like MySpace can be abused by criminals.Web surfers are presented with what appears to be a popup window advising them to download the latest version of Microsoft&#39;s Windows Malicious Software Removal Tool, which was just released this Tuesday. This software is distributed by Microsoft to help Windows users rid their systems of malware.In reality, the popup window is just part of a larger image that takes up most of the computer screen. If the user clicks anywhere on this image, his computer will then begin to download the Trojan program.The Trojan, known as TFactory, is a well-known piece of code that has been used by criminals for well over a year, according to Dave Marcus, a security research manager with McAfee.Hackers were able to launch this attack because they either discovered a flaw in the MySpace code or found a way of taking over user accounts, Marcus said. &quot;Our best guess is [the owner of the one MySpace profile] just got their password and user name phished,&quot; he said.Social networking sites allow their members to use an array of powerful Web programming tools that are increasingly coming under the scrutiny of hackers looking for ways to misuse them.In November, hackers found a way to serve up Web-based attack code from the MySpace profiles of Alicia Keys and a number of other musical artists.
29234
Security researchers have uncovered a spoofing flaw in Internet Explorer that could turn out to be the perfect holiday gift for scammers.
127768
Third-party fix plugs a recently discovered browser flaw that's increasingly being exploited in cyberattacks.
42081
Blog: Popular add-ons could have their update process hijacked by man-in-the-middle attacks.
360592
Exploit code affecting an unpatched flaw in an image uploader used by both Facebook and MySpace is circulating publicly.
562547
Fake patches, rogue invoices make the rounds as spammers continue trying to fool people into installing Trojans on their PCs.
204228
An unpatched IE security flaw can install malicious software via rigged Web sites, including porn sites.
482734
E-mail message falsely claims that tool detects, cleans up adult-related material on your PC.
236014
A new Trojan horse modifies infected PC's hosts file to replace Google text ads with ads from another source.
565800
Flawed software code used by numerous Microsoft applications to render images mean that a specially constructed image file could hijack a computer or spread a virus.
543022
Code that exploits a serious, yet-to-be-patched hole in Microsoft's Web browser has been posted on the Net.
472866
An anonymous hacker who claimed last week to have found a way to generate valid Windows Vista activation codes now says his crack was a joke. But some users who tried it say it worked for them.
662176
Security flaws in browser Internet Explorer are being exploited by porn sites to hijack Windows PCs.
599663
One of Harvard University's Web sites appeared on Monday to have been hacked, with its contents appearing on th...
583626
Zango and cash In Brief A worm exploiting Javascript support within Apple's embedded QuickTime player has spread across the MySpace network.â¦
191229
A bug in Microsoft&#39;s Internet Security and Acceleration (ISA) Server 2000 and Proxy Server 2 can let hackers spoof Web content, such as a trusted site, with their own fake content, the Redmond
754347
Hacker web sites are claiming to have posted proof-of-concept exploit code for the latest critical Microsoft Corp software vulnerability, which is sometimes a precursor to broader attacks using a worm.