Pink Floyd worm spreads on 'Chinese Facebook' (Pinkren-A, Mikeyy, Orkut worm)

Custom Search

Hack in The Box
Free PC Security
TechAirlines
Freeware
OnlineSchutz
NewsApp Portal
Electronic Parts
Laser Printer
Search Engine Optimisation
Chicago Attorney's
Electricity Prices
Texas Electricity
Electricity Rates in Texas
Electric Companies in Texas
iPod Touch Games
Sharepoint Consultants

[Welcome to SCforum.info - Security [CENTRAL] Forum]

Welcome to SCforum.info - Security [CENTRAL] Forum, a home of the SCF Community devoted to provide Computer related News, Alerts, Downloads and FREE Help in such a way that even the novice computer user can understand.

Getting started using our community is extremely easy, check the two steps below:

Step 1: Create an account by clicking here. It's completely free with no hidden strings attached.

Step 2: If you have a computer problem and need some help, or just want to take part in opened discussions, simply visit scForum. Once you *Register an account, you can quickly post your questions and comments.

(*Registered Members get: free support, also, they can communicate privately with other members via PM, removal of this message, see fewer ads and much more...)

[Samker]

Malware authors have developed a cross-site scripting worm that's spreading across a Chinese social networking website.

The Pinkren-A worm poses as a video clip of Pink Floyd's Wish You Were Here contained in messages sent to users of Renren, the Chinese social networking website with around 40 million members. Selecting these messages results in the execution of malicious JavaScript, further spreading the infection.

"The technique used in this worm exploits a simple XSS hole in the website - with a payload which has a flash component with the AllowScriptAccess=”always” attribute to allow the above “non-malicious” javascript to spread the worm via renren.com’s API," explains Sophos researcher Boris Lau in a blog posting: http://www.sophos.com/blogs/sophoslabs/v/post/6208

Preliminary analysis suggests Pinkren-A simply spreads across the Facebook-like site without doing anything more malicious.

The techniques applied by the worm are similar to those of the Mikeyy worms that spread rapidly across microblogging site Twitter earlier this year and an Orkut worm in 2008. Orkut isn't popular in the US or Europe, but the Google-owned social networking site is big in Brazil and up and coming in India.

(Register)