Internet Security and Programming

A complex, ongoing attack on MySpace.com users is turning victim’s sites and computers into hosts for serving phishing scams and computer viruses. Earlier this week, some MySpace user pages were seeded with computer code seeking to exploit one of three recently-patched security holes in Microsoft Windows and Internet Explorer. MySpace visitors who browse one of these pages are redirected to a fake MySpace login page aiming to steal the visitor’s MySpace user name and password. A screen shot of an infected MySpace profile. Clicking anywhere on the live version of this page will redirect the visitor to a fake login page and try to seed the visitor’s PC with malicious software. We’ve seen a similar attack against MySpace, but this new one has a twist. A scam victim’s MySpace page is altered to include code redirecting users to a phishing page. Meanwhile, if the user’s computer does not have [...]

Read more…