Security Experts at MicroWorld Technologies inform that a Worm named ĎWin32.Ofigelí is spreading in large numbers across the world among a 70 million strong user base of the highly successful community portal, Myspace.com. Security experts had long raised concerns about the vast opportunity that websites like Myspace provide to online thieves and criminals, in exploiting their open nature and easy access.
Then the Worm logs onto certain websites to download the malicious Quicktime movie and adds it to the userís profile. When a new user, mostly the victimís contact, watches the movie, his or her computer gets infected and the chain goes on.
As if thatís not enough, Ofigel later harvests the email IDs of victimís contacts and starts sending Spam mails to them with subject lines like: What else is there to do on a Sunday, You better not forget about this, Hehe that was so funny, Better see this one last time lol, Whoís coming to the party tonight, etc. All messages quiet in sync with the youth culture of Myspace.
Myspace officials inform that they are acting to minimize the impact of this worm on users, by identifying the URLs attempting to exploit this vulnerability. Those URLs are being blocked, while the infected profiles being removed.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.