MySpace data phished and leaked
56,000 login details exposed by phishing researchers.
A large quantity of MySpace user login and password data has been posted online, according to some reports by researchers into phishing techniques available on the social site.
The data was apparently gathered via a spoofed login page linked to from the site, and over 56,000 sets of details made publicly available online. At least some of the details entered make it clear that some visitors spotted the phish and posted fake and even abusive login data. Various phishing filters, including Firefox, were quickly updated to warn users visting the site.
A link to the listing was later posted to the Full Disclosure security forum, claiming the 56,000 figure was still rising. Although the site hosting both the phish and the data has since been taken down, it is thought the data was exposed to numerous visitors and is still available elsewhere on the web.
The original Full Disclosure posting is here, with some commentary from bloggers at SecuritTeam here and ComputerDefense.org here.
19 January 2007
Tags:
del.icio.us
digg this
Poll
Will the current banking crisis lead to an increase in phishing attacks?Leave a comment
View 1 comment
Virus Bulletin
In this month's magazine:- Does the punishment fit the crime?
- Prophet and loss
- All your MP3s are belong to us
- Malware teaching considered harmful?
- Il buono, il brutto, il cattivo
- Lavasoft Ad-Aware 2008
- The problem of backscatter – part 1

Subscribe now!
Virus Bulletin currently has 138,346 registered users.

