A
bad weeks
Twitter just for the worse. The service has apparently been infected by a worm from the site owners StalkDaily
(Note: do not visit this site, because it can cause your computer to be infected).
At this point, details are scarce, but it seems to visit an infected user's Twitter profile can bring your profile to become infected (some reports say that the worm changes its 'About Me' section to include a link to the worm). Infected people may start to spam tweets sometimes refer users to the website StalkDaily.
The attack seems to be born early this morning, when a
handful
blog popped up detailing the worm. However, it is only now hitting critical mass, with hundreds of participants on relevant Tweets Twitter Search in the last few minutes alone. Twitter Official
Spam watching
updated account this morning saying that the company was aware of the problem, but had largely been resolved, and just released another update that you've read about the rebirth of the worm this afternoon.
To be safe, it should probably stick with a third party Twitter client and avoid the display of pages until the company profile confirms that the problem is resolved.
Some first
Comments
are indicating this is an XSS attack on Twitter. Others note that the attack may be initiated after one of the many third-party Twitter applications login credentials entered by users of Twitter and hijack their accounts.
Updated 9 PM PST:
Twitter has issued the following update on his
Status Page
that the problem was solved:
Update on StalkDaily.com Worm 36 minutes ago
Today we were informed of a site "evil" that has been the spread of connections on Twitter StalkDaily.com without consent through a cross-site scripting vulnerability. We have taken steps to remove the offending updates, and to close the holes that allowed this "worm to spread.N. passwords, phone numbers or other sensitive information have been compromised as part of this attack.
Update: it seems StalkDaily has updated its website to say that has nothing to do with the attacks. Regardless,
not you visit the site
for the moment.
For all I ask, I have the promotion and / or has been involved with the spam on Twitter. All the bad things that have been heard on this site is not true. Please reconsider as I am not the person who did this ... StalkDaily is a site that follows the same functions as Twitter, most advanced, except for What? Well, instead of adding an "update status", users can add photos and video. Then you can stick, so when you upload a video or photo, or comment for someone, you know!
Crunch Network:
CrunchBase
The free database of technology, people, and investors
Recent Comments