« Firefox Password Manager Compromised | Main | MS Word Flaw »

Saturday, December 02, 2006

Quicktime movies phishing MySpace.com users through Internet Explorer

Quicktime .mov files have been exploited in order to, at least in part, launch phishing attacks against myspace.com patrons. The SpywareGuide Greynets Blog summerized it thus: 1) A new Myspace worm 2) Bad guys using HREF functionality available to Quicktime files 3) Hacked websites hosting fake Myspace login details 4) A pornographic website (linked to from various hacked profiles) that contains Zango content, as well as using a popunder to display more Zango videos. More info is here and here.

Posted by Matthew Carrick at 5:46.58 PM EST | Permanent Link
| Categories: Security Alerts, Virus-Trojan-Worm Alerts