MySpace Under New Malware Attack

MySpace is under attack again. As per Marshal's TRACE team, it involves spam that pretends to be a legitimate invitation to join MySpace. It contains a link that redirects to a fake MySpace page. Once there the user is prompted to update Adobe Flash player. If they accept the download, malware is downloaded to their computer, turning it into zombie and making it part of a botnet. The affected computer then starts sending phishing emails targeting major US banks. "We saw sites such as YouTube targeted in these kinds of malware distribution campaigns last year. It follows that social networking sites would be next on the spammers list of targets to exploit, eventhough this newest campaign arrived a little sooner that expected. This attempt to exploit MySpace is simplistic but effective," said Bradley Anstis, Marshal's VP of Products. It is still not clear if the botnet in question is controlled by the Storm Worm or a single hacker or gang. Posted by: Sue Walsh    Source