Fergie's Tech Blog

Hackers Infect Alicia Keyes’s MySpace Page - UPDATE

Brad Stone writes on the NYT Bits Blog:

The MySpace page of singer Alicia Keyes has become the latest vehicle for malware on the Web.

Researchers at the Atlanta, GA-based Exploit Prevention Labs have discovered multiple hacked MySpace pages, including the personal page of the R&B artist. Also hacked were pages for Greements of Fortune, a French funk band, and Dykeenies, a rock band from Glasgow.

When visitors click almost anywhere on these infected site, they are directed to co8vd.cn/s, which appears to be a Chinese malware site. The visitors then see a box on their screen telling them they need to install a special codec to view the video – a legitimate possibility on any site rich in media. But if the visitor clicks ‘yes’, the site installs software that appears to be a rootkit and DNS changer. This would allow the hackers to take over what you see on your browser and what you download onto your computer.

More here.

UPDATE: 19:31 PDT: While Roger Thompson & Exploit Prevention Labs gets the high-five for publicizing this particular hack, Christopher Boyd over at VitalSecurity.org started discovering these MySpace Background Hacks a few days ago.

Props, paperghost. - ferg

UPDATE: 10:09 PDT, 9 November 2007: paperghost is pretty pissed. - ferg

posted by Fergie @ 11/08/2007 05:40:00 PM