MySpace Worm Uses QuickTime For Exploit

[Nomad559]

MySpace worm uses QuickTime for exploit

The social networking site MySpace.com is under what one computer security analyst called an "amazingly virulent" attack caused by a worm that steals log-in credentials and spreads spam that promotes adware sites.

The worm is infecting MySpace profiles with such efficiency that an informal scan of 150 found that close to a third were infected, said Christopher Boyd, security research manager at FaceTime Communications Inc.

MySpace, owned by News Corp., is estimated to have at least 73 million registered users.

The worm works by using a cross-scripting weakness found about two weeks ago in MySpace and a feature within Apple Computer Inc.'s QuickTime multimedia player.

The exploit starts with a user who visits a MySpace profile infected with an embedded QuickTime movie. The movie loads JavaScript code that overlays a row of menu options on a MySpace profile with a bogus menu.

[neuvocat]

1. In which case...

it is actually a problem with Quicktime.

[Nomad559]

3. How long have Apple and Myspace known about the worm?

http://www.vitalsecurity.org/2006/12/how-long-have-apple-and-myspace-known.html

The past couple of weeks I've been working with Apple on patching up an exploit to a piece of functionality in the QuickTime plug-in. Word of it was getting around slowly because someone created a worm that was spreading like mad, and others were phishing shitloads of accounts

[tridim]

6. Quicktime Pro doesn't even work on my computer (XP x64)

It's a format that just needs to be phased out IMO, like Real Media.

[wtmusic]

2. Oooh, a Javascript worm

Maybe it even closed a browser window!

:rofl:

[LTR]

4. Quick Time is a useful piece of software, but it is a real pain in the ass

The main thing I loath about it is that it attaches itself to the startup menu like glue, and there's really no way to take it off. RealPlayer did this a while back and stopped. And now QT comes attached to iTunes, so it's kinda forced on you no matter what (since I need iTunes to download some podcasts like "Real Time with Bill Maher").

As for MySpace, that place is a haven for really nefarious scripting. I'm surprised it hasn't been exploited more by hackers.

In conclusion, I will say that I disaprove of the death penalty, except for people who create viruses and spyware.

:mad:

[silverojo]

7. QuickTime and RealMedia suck.

I've uninstalled both. If somebody "requires" me to have either to access a video, I just move on. I'm not going to be blackmailed into having those two programs on my PC. They cause so many problems, it's hard to tell whether those programs are acting up, or if you have a virus.

[Nomad559]

8. Try using

QuickTime and Real Alternative

I've been using both for a couple of years now.

QuickTime Alternative
http://www.free-codecs.com/download/QuickTime_Alternative.htm

Real Alternative
http://www.free-codecs.com/download/Real_Alternative.htm

:)

[LTR]

10. Is there a way to uninstall QT and leave iTunes?

And run with the QT alternative?

I tried the RP alternative a few years ago, but it didn't work well for me (outdated?). By that time, Real had cleaned up their act somewhat and I reinstalled it. No problems, and no tkbell file screwing up my settings.

QT seems to have reverted back to its prior nastiness. Whenever Apple snobs talk up their product, I make sure to bring up Quick Time.

[dubeskin]

5. I've noticed many people with this problem

My friends who I know would never post bulletins anyway, are posting stuff like "Size DOES matter!" and "Check out this new drug I found for staying up!!!" And Tom, the creator of Myspace, announced it. But also it does seem to be an Apple error, which shouldn't have happened anyway. And as far as I know, I never updated in the first place, so it seems people who never updated are safe, correct?

[SmellsLikeDeanSpirit]

9. So thats what that was about....

Everytime I would log in a popup asked me to update my quicktime. I did. Haven't noticed any problems, but I don't use myspace the much anyway. So spam away.