Spyware Found on MySpace MySpace users pics hijacked
Jul 17

A blog entry on the ChaseandSam.com website noted the MySpace issue, where an embedded Flash file caused problems for MySpace users.

Signed in users on MySpace who visit a profile that already has the malicious code infecting it will in turn have their profiles infected. Everyone who arrives at an infected page will be redirected to another blog containing a rant about the 9/11 attacks.

The ChaseandSam site listed a safe link to the Flash file exploiting the MySpace code. Since MySpace allows its users to embed code to display content, it was a trivial matter for the attacker to place the code on a profile and wait for people to stumble across it.

While the embedding feature makes it easy for MySpace users to share audio and video content, it appears the site could be more rigorous in assessing embedded code placed on profiles.

Kinematic, a user on the Digg news site, posted an assessment of the code used by the attacker. A Flash file performing the redirect would be encountered first.

Then the landing page would fire up another Flash file, retrievecookie.swf. The ActionScript in that file would then pull up a blog post from elsewhere on MySpace, and evaluate that code.

In doing so, the attack would grab the visitor’s MySpace token and hash code. Kinematic commented that the hash code is supposed to be a security measure. Like the token, the hash code is also in the URL, a helpful condition for the attacker’s code.

After that, the visitor’s profile gets modified, and the next person to visit the profile while logged in to MySpace likewise gets infected. Fortunately, the code can be removed from the profile. The post on the ChaseandSam website shows how to find the offending code in the profile to get rid of it.

50 Responses to “MySpace Flash Attack Corrupts Profiles”

  1. casinos Says:

    I found your website after I have been surfing the internet to be useful

  2. Wellcare Says:

    Ein wirklich sehr Interessante Seite mit guten Informationen.

  3. health Says:

    Just dropping in to let you know you have an interesting site. I hope you’ll continue to work on it. Wishing you all the best.

  4. kaiser Says:

    Nice website

  5. Iowa Says:

    Nice page. It’s good to have kids who can use this medium to find you

  6. term Says:

    Hi - enjoyed your home page!

  7. Auto Says:

    Warm greetings! Thanks for all the information, a very nice and well done site! Cheers.

  8. auction Says:

    I love everything about this site!!

  9. Prudential Says:

    A very very nice site with helpful informations! So keep up the good work - I already added the site to my personal favourites. All the best!

  10. Auts Says:

    Hi - enjoyed your home page!

  11. New Orleans Says:

    Got here and seen your stuff - way to go!

  12. coverage Says:

    Logging into this website should be a requirement for anyone knowledgeable on earth these days…

  13. costco State Farm Auto Insurance Says:

    perfect site !!!!!!!! Perfect piece of work fellows !!!!!!!

  14. nj commercial Says:

    I just want you to know that I think you did a terrific job on this websight.

  15. Game Guides Says:

    Hi My wife and I would like to thank you all for this web site. Hours of pleasure and all

  16. Popular Gambling Games Says:

    Our site is cool, but also yours is very nice too

  17. Wash Says:

    Nice! We rather appreciated the website

  18. about Says:

    Like the site very much, thanx 4 your efforts webmasters

  19. Best Guides Says:

    Exstremely lovely site. Very impressed about all the lesson there are to learn and to know how much help is there also. Keep up the great work

  20. News Says:

    Great site! Best wishes!

  21. blackjack Says:

    SarahBell ( ) wrote:

  22. discount Says:

    Boy, this is some high-class site

  23. Download Games Says:

    I have admire your unselfishness in taking the time to make this web site.

  24. Massachusetts Homeowners Insurance Says:

    Hello, I’m a regular visitor to your site so i finally decided its time to sign your guestbook, so here i sign !

  25. FirePay Says:

    I have admire your unselfishness in taking the time to make this web site.

  26. Play Games VideoPoker Says:

    Great stuff here guys, check this site out!

  27. Free Casino Portals Says:

    You have a good site, i enjoyed my stay!

  28. guarantee company Says:

    I just want you to know that I think you did a terrific job on this websight.

  29. purchase Says:

    Warm greetings! Thanks for all the information, a very nice and well done site! Cheers.

  30. variable quote Says:

    Hi - enjoyed your home page!

  31. ga__ Says:

    Your website is beautifully decorated and easily navigated. I have enjoyed visiting this site today and hope to visit many more times in the future.

  32. Information about Says:

    This is a very beautiful website, I have enjoyed my visit here very much. I’m very honoured to sign in your guestbook. Thanking you for the great work that you are doing here.

  33. Best Free Bonus Says:

    You’re website looks very good, it was a pleasure to be on you’re. Keep on the good work

  34. Overview Says:

    What a nice site, been surfing on it for the whole night and day and i neva got bored for a single minute. Keep up your good work and all of the best in everything you do! :-)

  35. Online Says:

    I must say that I was surprised to find this web page, but - - - Good Job.

  36. www Says:

    Your site is also very interesting, very calming effect just reading it. Will spend more time with certain areas. Well done and good luck with your work.

  37. Strategies Says:

    Great website, it was actually quite real helpful.

  38. gmac online Says:

    a really great homepage! i’m a big fan of your stuff although i’m just 16!

  39. online prescription Says:

    It´s a very good website you have here,

  40. online quotes Says:

    This is a one super duper site

  41. auction Says:

    Super site darlings. Thanks awfully

  42. m9rtgage Says:

    %-) genuinely interested by this website

  43. Autmobile Says:

    Thank you for the great web site - a true resource, and one many people clearly enjoy

  44. Kans Says:

    just a quick hello and congratulations to your nice website ! i’ll visit you again!

  45. Health net Says:

    In Zeiten von massenhaft Websitenmüll im Internet eine sehr gut aufgebaute Website, nicht überdimensioniertes Design und sehr gut recher-schierte Hintergrundinformationen.

  46. Yaonigisblingop Says:

    There are several drum yamaha on the ton
    for willpower place trades. In herbal, cheat contrary gloves
    to bond any exhibit that they improve.

  47. TratbrastenD Says:

    There are satiate a travel alarm
    waterfront pension is capable of doing that for you.
    If you are late on pledges, you village riping slapped with penalties.

  48. John Says:

    ZHVDsw bhsdrjkvbfjksbhfsvkbdhfkv

  49. black touch Says:

  50. marcus evans Says:

    Thanks for this!

Leave a Reply