IPB

Welcome Guest ( Log In | Register )



Tags
This content has not been tagged yet
2 Pages V   1 2 >  
Reply to this topicStart new topic

Myspace.com Flash Hack

, account hijacked worm and solution


Saint_Michael
no avatar
$p4m 0n j00 $h4m3 m3 0nc3 $p4m 0n m3 $h4m3 m3 7\/\/1c3
*********************
Group: [MODERATOR]
Posts: 7,172
Joined: 21-September 04
From: 9r33|\| 399$ 4|\|D 5P4/\/\
Member No.: 1,218
myCENT:90.20



Post #1 post Sep 4 2006, 09:38 AM
Well buffaloHELP just mention and I have confirmed it by many articles myspace accounts have been hacked or in hte sense that if your account was hijacked then anyone viewing your profile will also get infected as well.

In a article by chaseandsam.com go into detail on how this happen and a solution to it as well

Click here for more

---WARNING---

Also this hack is also a virus in which a person who is viewing your hacked profile will get their profile hijacked as well.


Also Symantec mentions about it as well

Nortan

How it was done


---SOLUTION---

ALSO YOU NEED TO UPGRADE YOUR FLASH PLAYER TO #9 as well

QUOTE
The solution is rather simple: Go to your home page, and click on edit profile, remove the line below (and only the line below) from your About Me section: (I added some "f's" to the code so it won't work here)

fembed ffallowscriptaccess="fnever" src=
"fhttp://i105.photobucket.com
/albums/mff225/yrkblack/redirecft.swf"
BY SPAIRLKAIFS

It's possible that the line above will be the only line you see - in that case, remove it all, and be sad if you had a custom template installed, because chances are you will have to re-install it.

If you see nothing in your About Me section, chances are you have a non-Myspace custom template. You will need to click on the link that says "Safe edit mode" in the top right corner of the edit screen. You should be able to edit your About Me section at that point. If, for some reason, when you click that button you are taken to a screen that deals with your Myspace groups and says something like, "you have no groups to moderate", then you will need to change the address in the Url box (at the top of your browser). It probably ends with this: fuseaction=groups.safemode, and you will need to change it to read: fuseaction=profile.safemode and then hit enter. From there, you should be able to remove the offending line of code from your account. Best not to do too much viewing of other people's accounts until Myspace fixes this problem. Please comment here if this has helped you or if it doesn't work, and feel free to browse the rest of our site!



also if you have a custom template you might have to reinstall it as well. As mention in the article as well.

If anyone still has questions go ahead and post him and we will try to answer them ASAP.
Go to the top of the page
+Quote Post
BuffaloHelp
no avatar
More than meets the eye
******************
Group: Admin
Posts: 3,736
Joined: 23-April 05
From: Trap17 storage box
Member No.: 6,042
myCENT:99.60



Post #2 post Sep 4 2006, 09:48 AM
My account was never "infected" so to speak... but two of my friends' profiles were redirected to some weird site.

http://www.auraka.org/2005/11/simple-myspace-hack.html

Oddly enough that this issue has been around since November, 2005 at the least. Before I resolved their redirect script I cleared my cache and then clicked on the "infected" profile. As soon as the profile was loaded enough for me to click on "BLOCK USER" I pressed the STOP button (browser menu button/icon).

I then blocked the user.

This wasn't really interested me until someone made a comment on my profile using the above similar method. And so I began to search the web for all its code meanings... and that's how I came across it.

Thank goodness I disabled all HTML codes from my profile. (Your account settings > profile settings, and disable from it all).

That just goes to show you: never take anything in default mode tongue.gif never let a rogue code ruin your day.
Go to the top of the page
+Quote Post
Saint_Michael
no avatar
$p4m 0n j00 $h4m3 m3 0nc3 $p4m 0n m3 $h4m3 m3 7\/\/1c3
*********************
Group: [MODERATOR]
Posts: 7,172
Joined: 21-September 04
From: 9r33|\| 399$ 4|\|D 5P4/\/\
Member No.: 1,218
myCENT:90.20



Post #3 post Sep 4 2006, 10:02 AM
heck now myspace has 2 things to worry about getting hacked and pedophiles laugh.gif.
Go to the top of the page
+Quote Post
midnitesun
no avatar
Premium Member
********
Group: Members
Posts: 181
Joined: 22-February 06
Member No.: 19,007



Post #4 post Sep 4 2006, 11:00 AM
looks like myspace is attracting a lot of hackers ,sometime back it was banner now its flash i wonder what its going to be next
Go to the top of the page
+Quote Post
CrazyRob
no avatar
ITS ALIVE.....MUHHHAAAA
*********
Group: Members
Posts: 534
Joined: 17-October 05
From: Chippenham UK
Member No.: 13,031
myCENT:63.10



Post #5 post Sep 4 2006, 11:35 AM
i have a myspace account ive had it since i was 15 i used it for 2 weeks then gave up so i dot really care if my account gets hacked there is not much there anaway. I think myspace is a waste of time but i have to say its so much better than Bebo
Go to the top of the page
+Quote Post
dylan2xs
no avatar
Newbie [Level 1]
*
Group: Members
Posts: 20
Joined: 19-November 06
Member No.: 33,668



Post #6 post Nov 28 2006, 09:32 PM
Well I think different people use myspace for different reasons, my opinion is very negative, BUT since sooo many of my friends are freekin using it well I joined ..now i can say that MySpace is one of the worst designed websites in the world, despite the fact that they are probally making millions and millions from sponsors the sight design and service is horrible, its a hackers paradise but well its free .. if I was paying a single dollar for a service like that ..I would be pissed but I'm not so I have no complaints.
Go to the top of the page
+Quote Post
coolduck123456
no avatar
Advanced Member
*******
Group: Members
Posts: 134
Joined: 18-October 06
Member No.: 31,859



Post #7 post Nov 28 2006, 09:53 PM
Glad I dont use myspace and probably never will. The question is: Does the virus affect your computer or is it limited to just myspace profiles?
Go to the top of the page
+Quote Post
brandon10092
no avatar
Premium Member
********
Group: [HOSTED]
Posts: 152
Joined: 8-July 06
Member No.: 26,287



Post #8 post Nov 28 2006, 09:53 PM
Yep I've seen that. I actually read the tutorial on how to do it. It seems interesting but it's something that you've got to watch out for. If you think something was wrong somewhere change your password as soon as possible, or your MySpace will be screwed for no apparent reason other than to please some idiot.
Go to the top of the page
+Quote Post
FLaKes
no avatar
Trap Grand Marshal Member
***********
Group: [HOSTED]
Posts: 1,140
Joined: 19-May 05
From: Mexico
Member No.: 7,234
myCENT:54.56



Post #9 post Nov 29 2006, 03:04 AM
Good thing I havent been on myspace for a while. I dont have much on it though. What I did find interesting is how this has been discovered since july according to the page that explains how flash and ajax based worm works.
Go to the top of the page
+Quote Post
Dooga
no avatar
Moderator
***********
Group: [MODERATOR]
Posts: 1,346
Joined: 26-December 04
From: Canada
Member No.: 2,940
myCENT:66.95



Post #10 post Nov 29 2006, 05:25 AM
It's sorta weird that a flash file can make someone else's account also hacked. There's too many script exploiters out there... why do it?

I don't really like or use myspace since it's full of ads. I rather install my own blog on my site smile.gif
Go to the top of the page
+Quote Post

2 Pages V   1 2 >
Reply to this topicStart new topic

Collapse

> Similar Topics

    Topic Title Replies Topic Starter Views Last Action
No New Posts   10 StEpHxK 25,876 29th July 2004 - 08:05 PM
Last post by: templest
No New Posts   11 max_powers1987 32,643 12th May 2009 - 01:25 AM
Last post by: iG-Bob
No New Posts   12 WeHateCHS 11,472 5th September 2004 - 10:56 PM
Last post by: icleric
No new   28 zyklon 26,723 4th January 2009 - 08:19 PM
Last post by: rpgsearcherz
No New Posts 7 odomike 18,292 30th April 2008 - 02:44 PM
Last post by: FeedBacker
No new   15 Argosoft 15,598 13th August 2004 - 05:58 PM
Last post by: Florisjuh
No New Posts   8 LuciferStar 11,559 25th January 2009 - 06:30 AM
Last post by: Antv912
No New Posts   3 etycto 1,298 13th September 2008 - 01:20 PM
Last post by: iGuest-
No new   24 Moneymaker 32,172 19th January 2009 - 09:07 PM
Last post by: Tramposch
No New Posts   3 eatbox 6,283 29th December 2008 - 03:01 PM
Last post by: surbjit
No New Posts   2 Echo_of_thunder 415 22nd January 2009 - 09:16 PM
Last post by: Echo_of_thunder
No New Posts   10 wenster 1,781 14th July 2007 - 12:40 PM
Last post by: nhacvui123
No New Posts   2 synderoxide 5,204 6th September 2004 - 01:05 AM
Last post by: synderoxide
No New Posts   6 Dark_element 5,439 22nd October 2004 - 04:45 PM
Last post by: cbaxter94
No New Posts   2 BuLLeT 4,414 11th October 2004 - 11:59 PM
Last post by: Casanova


 



RSS Open Discussion Time is now: 4th July 2009 - 03:14 PM

Web Hosting Powered by ComputingHost.com.