AIM Password theft

[Mark Coleman <markc () uniontown com>]

I just started investigating a report that appears to have merit of a 
username/password theft of AIM accounts.

Users are being directed to a web page located at www.haxr.org where the 
source appears to run a javascript program that is proportedly stealing 
AIM usernames/passwords/buddy lists.

Does anyone have any information related to www. haxr.org or the 
technique being used? 

Please be careful when visiting the page, it pulls script off of a yahoo 
site.

I am finding nothing in any of the initial searches that I am doing.

Any help/insight would be greatly appreciated.

-Mark Coleman




---------------------------------------------------------------------------
----------------------------------------------------------------------------