funsec mailing list archives

Re: MySpace Accounts Compromised by Phishers


From: "Dude VanWinkle" <dudevanwinkle () gmail com>
Date: Fri, 27 Oct 2006 15:52:06 -0400

On 10/27/06, Valdis.Kletnieks () vt edu <Valdis.Kletnieks () vt edu> wrote:
On Fri, 27 Oct 2006 15:15:58 EDT, Dude VanWinkle said:
> On 10/27/06, Fergie <fergdawg () netzero net> wrote:
> > Good question. :-)
> >
>
> a better question is why the hell would you jack a myspace page?
>
> is there any way to make money off it? What are the incentives?

You jack a page, now you have a starting point to feed IE exploits at
all the victim's friends when they visit.  You get lucky and nail somebody
with 2,349 "friends", that's a lot of leverage.  Especially if part of the
thing you shoot them is something to whack *their* Myspace page and go viral.

High hit rates by people who are likely not security/privacy conscious.
What's not to like about it if you're a black hat trying to monetize it? :)


You have a dirty mind my friend!

Glad you are on the light side of the force :-)
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: