« Can a Network be Protected from Single-Packet Warhol Worms? | Main | Worms: Taxonomy and Detection »
Two Items: MySpace Worm Redux and Wikipedia's Timeline
From a friend in KL, a couple of things. First, the MySpace worm redux, written up by Daniel Hanson. A nice little summary of what happened.I believe we saw one possible direction of worm evolution recently with Myspace. It got some press, but I don't know if we have fully appreciated the significance of what happened. As background, Myspace is a portal site that allows people to have a profile, link to friends, essentially an online method of networking. Someone found a way to manipulate his profile in order to have other people "link" to him as a friend. This manipulation was viral, and by the end, the system was shutdown until Myspace had fixed the vulnerability that allowed this to happen. Meanwhile, the author, Samy, now had many, many friends.Source: Evolution of Web-based worms, Daniel Hanson on SecurityFocus.
Next up, a list of noteworthy computer viruses and worms on Wikipedia. The timeline itself is a nice idea, but is missing several key worms from over the years. Being Wikipedia, some of you may be able to help fill in the gaps with descriptions and additional milestones. Not every worm needs to be listed, but some major events are worthwhile. IM worms, cellphone malware, etc.
October 25, 2005 in media, new trends | Permalink
Tell others: digg submit
|
del.icio.us this
|
Reddit
Comments
The case with MySpace is not the first one when for a special environment, such as social networking there is created self-propagating code or worm. In August this year in Latvian Internet there appeared a conceptual code which was able to send himself to users of the site Draugiem.lv (“Friends.lv”- analoque of “MySpace”). Draugiem.lv has its own internal messaging system. By the way of exploiting XSS vulnerability conceptual code (JavaScript) was able to send himself to other friends when user only looked at the infected message. The code is added to Kaspersky Anti-Virus database as Worm.JS.Graud.a.
Posted by: Valdis | Oct 26, 2005 3:12:03 AM
The comments to this entry are closed.