Billy Hoffman sent a link to the WASC list pointing to a link on the Spywareguide discussing a new Quicktime XSS worm that hit MySpace. I have a feeling there are more to come but this is pretty bad.

The basic premise is that a porn site was set up with links to movies with pdp’s Quicktime backdoor in them. When people get infected it changes their MySpace pages to include the movie and so it propagates. Nasty. As I said, I think there are more of these things to come.

This entry was posted on Sunday, December 3rd, 2006 at 6:51 pm and is filed under XSS, Webappsec. You can leave a response as well.