FaceTime Duo Srikes Again

By Jimmy Daniels
Contributing Writer, RealTechNews

The Paperghost and Wayne Porter have uncovered some social engineering on Orkut, one of the social networks. This infection, named mw.orc, can steal all your login info, spreads by using the scrapbook, it can even drop you into a chat room and you’ll soon be sharing pirated content.

The idea of problems behind “gated” communities is a pretty interesting one, even more so when the idea regularly rolls around that segregating various parts of the Internet to “keep the bad guys out” would be a great idea. But what happens when those bad-guys are already inside the gates?

“As Orkut limits the amount of photos that can be published in my account, I created a slideshow with some photos of mine, please click to see!”

This message is deposited in an Orkut user’s “Scrapbook” (similar to a guestbook), and as the Scrapbooks are public, anyone visiting can see the link and click it. As you probably guessed, that’s a real bad idea in this case.

The end-user is presented with what looks like an image file - open that thing up, and covert ops of the nastiest kind are instigated against the PC. The below files are installed:

They don’t look like much, but they’re busy trying to drain your pockets of cash and anything else they can get their hands on. One of the files contains references to a pile of specific login pages for Brazilian banks, as well as a whole section devoted to Orkut and its Friends and Scrapbook pages. Source: SpywareGuide.com

We Say: And you all know how these infestations are, you see one and there are hundreds more hidden, and how long before something similar is routinely happening on myspace? If it’s not happening already, I bet someone is at least testing something.