Crackers attack Facebook and MySpace

Fortify Software security company says that social web sites like MySpace and Facebook are at the moment best targets for crackers. Main reason is that sites are also for less advanced users who can easily click a bad link.

- Buffer overrun in Aurigma ActiveX picture upload software gives attacker a chance to get to uploaders computers, says Rob Rachwald from Fortify.

This software is used in both Facebook and MySpace.

Buffer overrun exploiting tool is easily available in web and can be used without a great technical knowledge.

That's why Rachwald states that MySpace and Facebook should have made Aurigma to check program code before they started to use it.

Source: vnunet

Zango infects FaceBook

Adware Zango spreads now in FaceBook and has infected already 3 per cent of all users, in total over a million accounts.

Fortinet warns about Secret Crush which contains Zango. This programs send itself automatically to 5 friends.

Guillaume Lovet from Fortinet said that profit-making programs for FaceBook are in on the rise. He also states that community sites like FaceBook become more dangerous all the time and those users with browsers with non-patched vulnerabilities are in greatest danger.

Zango has been able to spread fast as users don't consider programs in FaceBook as dangerous as eg. email attachments.

Source: vnunet