Tech: MySpace members - ** warning **

Subject: Tech: MySpace members - ** warning **
From: Mr Red
Date: 04 Feb 07 - 12:04 PM

I read in Computer Shopper (UK)- this month that MySpace has had been hacked. Basically it is a worm and it affects members who are logging-in. Visiting a profile triggers a Quicktime movie which runs JavaScript and that creates a fake menu at the top of the page.

I guess the only way to tell is to look at the URL destination in the URL window but in my experience Google bars truncate the window and any Hack will play on that. Or read MySpace warnings.

The Worm logs your keystrokes and they can be used later.

Have fun but switch on the brain first.

Casual visitors should be safe.

Subject: RE: Tech: MySpace members - ** warning **
From: Bonnie Shaljean
Date: 04 Feb 07 - 05:43 PM

Does disabling Java Script protect you? And, can you read the URL destination in the status bar at the bottom of the (Windows) screen?

Subject: RE: Tech: MySpace members - ** warning **
From: Scrump
Date: 05 Feb 07 - 03:20 PM

Are Myspace doing anything about it?

Subject: RE: Tech: MySpace members - ** warning **
From: Willie-O
Date: 05 Feb 07 - 03:47 PM

MySpace was on top of the situation, sort of --it's old news now. Here's their response

They had to negotiate with Apple to do something about it because it required Apple to update Quicktime, to not give hackers the ability to use it that way. Anyway, this happened in December so that particular hack is old news now and doesn't work any more--which is not to say that Quicktime has been modified yet to ensure that new ones won't come through the same hole.

W-O
hey, sya, www.myspace.com/theskirmish is my presence there...

Subject: RE: Tech: MySpace members - ** warning **
From: GUEST,Mr Red who doesn't MySpace
Date: 06 Feb 07 - 07:49 AM

Presumably it is the Quicktime on the serverside - it will happen again - any site that is popular is a happy hunting ground for miscreants.

How do you know if you were Key-logged?

Seems to me the warning is valid especially if you logged-in over December.

Old news desn't mean history has been wiped. Only the future has been made safer (for now).