Worm Nibbles at Google Orkut Members

December 21st, 2007

Security researchers report that Google’s Orkut was the target of what appeared to be a relatively benign worm that experts say illustrates the ability of hackers to drop code into social-media sites.Orkut has millions of registered users, some 700,000 of which were affected by the worm over a period of 24 hours.

The exploit was contained in a JavaScript file, aptly named “virus.js.” When Orkut users received e-mail about a new scrapbook entry and clicked through to the site, the browser downloaded and executed the embedded virus.js file automatically — without the need for any user intervention.

Click here to read the rest of this story on NewsFactor.

Entry Filed under: Hot off the Press