- +
Ticked Off at Tick the Box Mentality 04/02/2008 13:01:15
Does your executive search firm know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?Does your executive search firm know its MIS managers from its elbow? Does it even know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
The MySpace pages for singer Alicia Keys and other musicians were hacked with a seemingly new type of hack, a security expert said.
Keys' MySpace page and that of others, including a Scottish band and a French band, were flagged by users of Exploit Prevention Labs' LinkScanner software, which blocks pages containing malicious code. The discovery came after users began reporting that Keys' page was blocked, according to Roger Thompson, chief technology officer of LinkScanner.com.
"When we saw it was MySpace and Alicia Keys, we took a good look at it," he said in an interview.
When a visitor views the page, an exploit first attempts to install malware on the visitor's computer if it is not properly patched. Thompson said he was not sure yet which flaw the malware was looking to exploit. If that is not successful, the user is then asked to install a fake codec to view a video. Thompson explains the process in this video.
If both of those should fail, the user is also vulnerable if he or she clicks anywhere on the page that is not a legitimate link--including the ads. "If your mouse slips a bit from what you meant to click, you get the background [link]," which references a site based in China, co8vd.cn, and also attempts to install malicious code. Thompson said he had not seen that kind of "image-background link" before.
The domain is registered to Xiamen Hua Shang Sheng Shi Network, in the coastal city of Xiamen in Fujian province, according to the China Internet Network Information Centre's WHOIS listing. The company could not immediately be contacted for comment.
Because the attack affected several different pages, including one of a high-profile figure like Keys, Thompson believes this is a hack of MySpace, and not a case of attackers simply uncovering the user names and passwords for those pages.
MySpace said it had already taken care of the problem.
"Individuals who try to phish our members are violating the law and are not welcome on MySpace. We have blocked and removed the source of this phishing attempt and restored the profile," a MySpace spokesperson said by e-mail. Thompson confirmed that the Keys page was now clean, but added, "We'll see what happens over the next few days."
The hackers success with Keys' page, which Thompson described as "lucky," couldn't come at a better time for them--or worse for the musician. Keys, a Grammy Award-winning singer with several platinum albums, will put out her latest release, "As I Am," on November 13.
Computerworld Member Login
Beyond Virtualisation - The Roadmap to 2012
CIO Breakfast Briefing
8:30am - 10:30am
Brisbane | 22 July | Sofitel Brisbane
Sydney | 23 July | Four Seasons Hotel
Canberra | 24 July | The Hyatt
Attend and discover:
- What happens after virtualisation
- The benefits automation drives
- When automated infrastructures will emerge
- What the roadmap to 2012 looks like
- How to deliver an automated architecture
- How to maximise your investment in virtualisation
- +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future. - +
Data Management Edition #9: Data centre makeover 24/04/2008 07:43:06
This week CW Live looks at the death of the old style data centre which is undergoing its first makeover in more than 30 years.
Ballarat Grammar Improves Student Access to Computer Based Learning with HP ProCurve 2008-07-04 16:49:00+10
Media release: 40 Per Cent of Australian Businesses Do Not Validate Their Data 2008-07-04 10:29:00+10
Kaseya helps turbo charge BlueFire’s service delivery model 2008-07-03 17:23:00+10
Computershare Selects Symantec for Data Loss Prevention Globally 2008-07-03 14:52:00+10
DST International moves to new Shanghai office 2008-07-03 13:21:00+10
Reducing risk through requirements driven quality management: An end-to-end approach
An effective requirements management system must help both business analysts and quality managers meet their commitments with limited resources and in the face of inevitable change. Read on to discover a better business approach to quality management.








