Twit's Get Tweated Cause Someone Cheated - Twitter Worm

Posted by John B. Frank Monday, April 13, 2009

From F-Secure's Website: Twitter worm outbreak over Easter due to Stalk Daily Publicity Stunt?

A cross-site scripting worm was spreading in Twitter profiles for several hours last night.

People started reporting that their profile had sent Twitter messages without their knowledge. Messages looked like this:

Later on the messages morphed several times:

Many people followed the links to stalkdaily.com, as they believe the messages to be genuine Tweets from their friends. A cross-site script on the site then caused new users to start to Tweet the same messages.

More info on the technical internals of the attack are available at dcortesi.com.

As expected, the whole worm was a publicity stunt by stalkdaily.com.

You can see the latest official status of Twitter from their status page at status.twitter.com

We detect the script file as Worm:JS/Twettir.A.

Updated to add: This is not over. There's going to be quite a few modified Twitter worms for a day or two. Be careful in Twitter, don't view profiles, don't follow links. It's beautiful outside, maybe go for a walk instead?

Here's one current variant:

mikeyy

All these attacks are Javascript-based. Turn Javascript off if you're worried. More info here. Editor's Note: If you turn off JavaScript, you won't get a popup floating PIN Pad!

Twitter Worm, Twitter, F-Secure, StalkDaily

0 comments

Post a Comment

Learn More About Us

Find out how our patented technology can empower your financial institution.

Our secure two-factor online banking authentication eliminates dangerous passwords and usernames and replicates the same trusted process used to access cash at ATM's. (Insert Bank Issued Card, Enter Bank Issued PIN)

There is an R.O.I. as FI's also earn recurring revenue from each transaction conducted using our PCI 2.0 Certified PIN Entry Device. Our technology also provides a unique real-time P2P "Instant-Transfer" which allows your online banking customer to transfer cash from ANY of their bankcards to ANY other bankcard...with the Swipe of a card.

Help your bank eliminate phishing and your customers avoid identity theft by providing them with the ability to stop typing and start swiping. There is no safer way to conduct financial transactions online than by 3DES DUKPT encrypting the cardholder details, which we do at the mag-head "inside the box/outside the browser."

All Top Banking