Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register

Alicia Keys' MySpace page sings with malicious code

Musicians find their MySpace pages hacked with a new type of hack that attempts to install malware


The MySpace pages for singer Alicia Keys and other musicians were hacked with a seemingly new type of hack, a security expert said Thursday.

Keys' MySpace page and that of others, including a Scottish band and a French band, were flagged by users of Exploit Prevention Labs' LinkScanner software, which blocks pages containing malicious code. The discovery came after users began reporting that Keys' page was blocked, according to Roger Thompson, chief technology officer of LinkScanner.com.

"When we saw it was MySpace and Alicia Keys, we took a good look at it," he said in an interview.

When a visitor views the page, an exploit first attempts to install malware on the visitor's computer if it is not properly patched. Thompson said he was not sure yet which flaw the malware was looking to exploit. If that is not successful, the user is then asked to install a fake codec to view a video. Thompson explains the process in this video.

If both of those should fail, the user is also vulnerable if he or she clicks anywhere on the page that is not a legitimate link -- including the ads. "If your mouse slips a bit from what you meant to click, you get the background [link]," which references a site based in China, co8vd.cn, and also attempts to install malicious code. Thompson said he had not seen that kind of " image-background link " before.

The domain is registered to Xiamen Hua Shang Sheng Shi Network Co., in the coastal city of Xiamen in Fujian province, according to the China Internet Network Information Centre's WHOIS listing. The company could not immediately be contacted for comment.

Because the attack affected several different pages, including one of a high-profile figure like Keys, Thompson believes this is a hack of MySpace, and not a case of attackers simply uncovering the user names and passwords for those pages.

MySpace said it had already taken care of the problem.

"Individuals who try to phish our members are violating the law and are not welcome on MySpace. We have blocked and removed the source of this phishing attempt and restored the profile," a MySpace spokesperson said by e-mail. Thompson confirmed that the Keys page was now clean, but added, "We'll see what happens over the next few days."

The hackers success with Keys' page, which Thompson described as "lucky," couldn't come at a better time for them -- or worse for the musician. Keys, a Grammy Award-winning singer with several platinum albums, will put out her latest release, "As I Am," on Nov. 13.


Talkback:

commentPost a Comment

 

MOST COMMENTS

 
 





Virtualization: A Step by Step Approach to Success
Your virtual machines can be up and running in a matter of minutes. HP and Citrix have integrated XenServer with HP ProLiant servers and management tools, powered by hardware-assisted Intel Virtualization Technology to enable high- performance, cost-savings solutions for server consolidation and disaster recovery. Sponsor: HP

»  Click here to view this Webcast
  Zombie PCs Are Attacking Your LAN
A recent study showed that malware-infected zombie PCs are now a bigger threat to ISPs and Web infrastructure than DoS attacks. As this brand new IT Strategy Guide explains, an increased use of peer-to-peer techniques by the attackers has made it harder to fight back. Download now, compliments of Verio:

»  Click here to download now

- Special Advertising Partners -
WHITE PAPERS
 

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
INFOWORLD MARKETPLACE
 
» BUY A LINK NOW
 
 

Video

 
 
 

Podcasts

 
 
 

 

Columnists

 
 
 

Resource Center


Ads by techwords beta  [See your link here]
 




Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist