Friday (iPhone) Open (iPhone) Thread > MySpace again under phishing attack

Users who click fake navigation bars on MySpace profile pages exposed to malicious botnets; several thousands PCs thought to be infected.

The attack is thought to have infected several thousand PCs according to reports from ISPs, said Johannes Ullrich, chief research officer for the SANS Institute. Ullrich has documented the issue on the SANS Internet Storm Center blog.

Criminals have managed to install fake navigation bars on the top of MySpace.com user profile pages that, when clicked, lead to malicious computers that attempt to infect the victim's computer. The attack uses several known Internet Explorer flaws that have been fixed, so users who have installed the latest Microsoft patches are not at risk, security experts said.