Hacked MySpace page serves up fake Windows update
There’s now one more reason to be security-conscious while using MySpace.com: fake Microsoft updates.
Using a hacked MySpace profile, online criminals are trying to trick victims into downloading a malicious Trojan Horse program by disguising it as a Microsoft update, according to researchers at security vendor McAfee.
The attack is certainly not widespread — McAfee has seen it used on only one MySpace profile — but it does show how sites such as MySpace can be abused by criminals.
Web surfers are presented with what appears to be a popup window advising them to download the latest version of Microsoft’s Windows Malicious Software Removal Tool, which was just released this Tuesday. This software is distributed by Microsoft to help Windows users rid their systems of malware.
Source: Network World
