Avoid getting worms from your friends

Making friends can be dangerous. A worm, named the MySpace XSS QuickTime Worm, uses Javascript embedded within a QuickTime video file (piAF2iuswo.mov) to change links in a user’s MySpace profile to links to porn or phishing sites and embed the video file within the site. The sites look just like MySpace and asks for MySpace login information (that’s the phishing aspect). Catching the worm is as easy as visiting the infected profile. To identify an infected profile, look for either an empty QuickTime video file or modified links in the header section of the MySpace profile. To remove the worm, remove the infected person from your friends list and remove any codes you didn’t put on your site. AdBlock should block the worm if you use Firefox, SeaMonkey and ThunderBird, and Websense Security PG will block access to the fraudulent site. Remember, friends don’t let friends get worms.

Read [Google] via [Google/PCMag]