Welcome Guest ( Log In | Register)



2 Pages V   1 2 >  
Reply to this topicStart new topic
> Myspace.com Flash Hack, account hijacked worm and solution
Saint_Michael
post Sep 4 2006, 09:38 AM
Post #1


$p4m 0n j00 $h4m3 m3 0nc3 $p4m 0n m3 $h4m3 m3 7\/\/1c3
*********************

Group: [HOSTED]
Posts: 6,561
Joined: 21-September 04
From: 9r33|\| 399$ 4|\|D 5P4/\/\
Member No.: 1,218
T17 GFX Crew



Well buffaloHELP just mention and I have confirmed it by many articles myspace accounts have been hacked or in hte sense that if your account was hijacked then anyone viewing your profile will also get infected as well.

In a article by chaseandsam.com go into detail on how this happen and a solution to it as well

Click here for more

---WARNING---

Also this hack is also a virus in which a person who is viewing your hacked profile will get their profile hijacked as well.


Also Symantec mentions about it as well

Nortan

How it was done


---SOLUTION---

ALSO YOU NEED TO UPGRADE YOUR FLASH PLAYER TO #9 as well

QUOTE
The solution is rather simple: Go to your home page, and click on edit profile, remove the line below (and only the line below) from your About Me section: (I added some "f's" to the code so it won't work here)

fembed ffallowscriptaccess="fnever" src=
"fhttp://i105.photobucket.com
/albums/mff225/yrkblack/redirecft.swf"
BY SPAIRLKAIFS

It's possible that the line above will be the only line you see - in that case, remove it all, and be sad if you had a custom template installed, because chances are you will have to re-install it.

If you see nothing in your About Me section, chances are you have a non-Myspace custom template. You will need to click on the link that says "Safe edit mode" in the top right corner of the edit screen. You should be able to edit your About Me section at that point. If, for some reason, when you click that button you are taken to a screen that deals with your Myspace groups and says something like, "you have no groups to moderate", then you will need to change the address in the Url box (at the top of your browser). It probably ends with this: fuseaction=groups.safemode, and you will need to change it to read: fuseaction=profile.safemode and then hit enter. From there, you should be able to remove the offending line of code from your account. Best not to do too much viewing of other people's accounts until Myspace fixes this problem. Please comment here if this has helped you or if it doesn't work, and feel free to browse the rest of our site!



also if you have a custom template you might have to reinstall it as well. As mention in the article as well.

If anyone still has questions go ahead and post him and we will try to answer them ASAP.
Go to the top of the page
 
+Quote Post
BuffaloHELP
post Sep 4 2006, 09:48 AM
Post #2


Desperately seeking "any key" to continue...
Group Icon

Group: Admin
Posts: 3,492
Joined: 23-April 05
From: Trap17 storage box
Member No.: 6,042



My account was never "infected" so to speak... but two of my friends' profiles were redirected to some weird site.

http://www.auraka.org/2005/11/simple-myspace-hack.html

Oddly enough that this issue has been around since November, 2005 at the least. Before I resolved their redirect script I cleared my cache and then clicked on the "infected" profile. As soon as the profile was loaded enough for me to click on "BLOCK USER" I pressed the STOP button (browser menu button/icon).

I then blocked the user.

This wasn't really interested me until someone made a comment on my profile using the above similar method. And so I began to search the web for all its code meanings... and that's how I came across it.

Thank goodness I disabled all HTML codes from my profile. (Your account settings > profile settings, and disable from it all).

That just goes to show you: never take anything in default mode tongue.gif never let a rogue code ruin your day.
Go to the top of the page
 
+Quote Post
Saint_Michael
post Sep 4 2006, 10:02 AM
Post #3


$p4m 0n j00 $h4m3 m3 0nc3 $p4m 0n m3 $h4m3 m3 7\/\/1c3
*********************

Group: [HOSTED]
Posts: 6,561
Joined: 21-September 04
From: 9r33|\| 399$ 4|\|D 5P4/\/\
Member No.: 1,218
T17 GFX Crew



heck now myspace has 2 things to worry about getting hacked and pedophiles laugh.gif.
Go to the top of the page
 
+Quote Post
midnitesun
post Sep 4 2006, 11:00 AM
Post #4


Premium Member
********

Group: Members
Posts: 181
Joined: 22-February 06
Member No.: 19,007



looks like myspace is attracting a lot of hackers ,sometime back it was banner now its flash i wonder what its going to be next
Go to the top of the page
 
+Quote Post
CrazyRob
post Sep 4 2006, 11:35 AM
Post #5


ITS ALIVE.....MUHHHAAAA
*********

Group: Members
Posts: 531
Joined: 17-October 05
From: Chippenham UK
Member No.: 13,031



i have a myspace account ive had it since i was 15 i used it for 2 weeks then gave up so i dot really care if my account gets hacked there is not much there anaway. I think myspace is a waste of time but i have to say its so much better than Bebo
Go to the top of the page
 
+Quote Post
dylan2xs
post Nov 28 2006, 09:32 PM
Post #6


Newbie [Level 1]
*

Group: Members
Posts: 20
Joined: 19-November 06
Member No.: 33,668



Well I think different people use myspace for different reasons, my opinion is very negative, BUT since sooo many of my friends are freekin using it well I joined ..now i can say that MySpace is one of the worst designed websites in the world, despite the fact that they are probally making millions and millions from sponsors the sight design and service is horrible, its a hackers paradise but well its free .. if I was paying a single dollar for a service like that ..I would be pissed but I'm not so I have no complaints.
Go to the top of the page
 
+Quote Post
coolduck123456
post Nov 28 2006, 09:53 PM
Post #7


Advanced Member
*******

Group: Members
Posts: 134
Joined: 18-October 06
Member No.: 31,859



Glad I dont use myspace and probably never will. The question is: Does the virus affect your computer or is it limited to just myspace profiles?
Go to the top of the page
 
+Quote Post
brandon10092
post Nov 28 2006, 09:53 PM
Post #8


Premium Member
********

Group: [HOSTED]
Posts: 152
Joined: 8-July 06
Member No.: 26,287



Yep I've seen that. I actually read the tutorial on how to do it. It seems interesting but it's something that you've got to watch out for. If you think something was wrong somewhere change your password as soon as possible, or your MySpace will be screwed for no apparent reason other than to please some idiot.
Go to the top of the page
 
+Quote Post
FLaKes
post Nov 29 2006, 03:04 AM
Post #9


Trap Grand Marshal Member
***********

Group: [HOSTED]
Posts: 1,136
Joined: 19-May 05
From: Mexico
Member No.: 7,234



Good thing I havent been on myspace for a while. I dont have much on it though. What I did find interesting is how this has been discovered since july according to the page that explains how flash and ajax based worm works.