The Mac Observer

Understanding the QuickTime/MySpace Phishing Threat

December 4th, 2006 at 2:00 PM - News by Jeff Gamet

Reports of phishing exploits on MySpace Web pages that host QuickTime files have reached a fevered pitch - unfortunately most of those reports are slim on details. The potential threat is real, but understanding what it is can help you avoid accidentally giving up your personal information.

What It Is
The phishing threat on MySpace takes advantage of QuickTimeis ability to automatically play Web page movies and open URLs. These features are used for legitimate purposes all the time, but they can also be used to unknowingly redirect someone to an alternate Web page or run malicious JavaScript code.

In this case, code is being used to trick users into giving up personal information: A phishing scam.

How It Works
Since this threat is being used on the MySpace social networking Web site, you first need to have a MySpace User Profile of your own. If you are logged into MySpace and view a maliciously crafted QuickTime file on someone elseis MySpace page, JavaScript code can be added to your MySpace page that makes changes to your user profile.

The malicious QuickTime file can modify your MySpace page by adding links to fake MySpace pages that collect user names and passwords. The file can also copy to your account without your interaction.

What You Can Do
Avoid playing QuickTime movies and audio files on MySpace profile pages. Disabling QuickTimeis auto-play feature is a good idea, too. Hereis how:

  • Choose Apple menu > System Preferences to launch System Preferences.
  • Select the QuickTime Preferences Pane.

  • Disable QuickTimeis auto-play feature.
  • Click the Browser tab.
  • Uncheck Play movies automatically.

  • Related Entries
  • Email This
  • Tweet This
  • Jeff Gamet on Twitter
Login. Need an account? Register here.



Auto-login on future visits

Show my name in the online users list

Forgot your password?


Commenting is not available in this section entry.
 

Recent Headlines - Updated November 10th

Mon, 7:20 PM
Rumor - Apple May Update iPod touch in December
6:45 PM
Product News - MacUpdate Desktop Updated to 5.0.1 with New Features, Bug Fixes
5:16 PM
Apple Releases Mac OS X 10.6.2 - Guest Account Bug Fixed, Much More
4:12 PM
Games - New For iPhone: Star Rangers, Air Force Supremacy, Blood Beach, More
2:51 PM
Apple Stock Watch - Radio Shack Jumps 14% on iPhone Deal, Apple Up 3%
2:25 PM
Games - EA Scoops Up Social Games Publisher Playfish
1:51 PM
Deal Brothers - Western Digital 1TB SATA Intellipower Hard Drive:  $84.99
10:58 AM
News - StarHub Signs Singapore iPhone Deal
10:36 AM
Hot Forum Topic - Reader Speculation: What’s in Apple’s Tablet?
10:08 AM
News - Apple Kicks Off New Credit Program
9:26 AM
News - Apple Launches Reserve and Pick Up Program
8:49 AM
News - ikee Worm Rickrolls Jailbroken iPhones
 

The Mac Observer Reader Specials

  • TypeStyler For Mac OS X is Now Shipping! Download The Free Fully Functional 60 Day Tryout at www.typestyler.com
  • RamJet Memory: Mac Pro 8-core 8GB Kit $199.99, 4GB Kits $109.99! Sale on MacBook and MacBook Pro 8GB kits $549.99! New MacBook DDR3 2GB for $49.99. iMac and Mac mini 4GB Kits for $79.99! 1TB SATA Hard Drives for $109.99! Click here
  • OWC: Get the Right Memory / Ram for your Mac. Top Quality, Competitive Prices, Lifetime Warranty. Expert Support and Video Installation Guidies too! 4.0GB Matched Sets from $87.99, Options up to 32GB. Click here
  • Poker Mac If you're using a Mac, then you've gotta check out Full Tilt Poker for Mac. This Full Tilt Poker bonus code does the unthinkable, it actually rewards!
  • For the latest Apple products use Ciao, a price comparison website, to find laptops like MacBook Air. Then find the best prices on MP3 players and use our comparison tool to evaluate mobile phones like the Apple iPhone.

  • Laptop Hardware Provided by TechRestore - Overnight Mac & iPod Repairs.
  • Buy Stuff, Support TMO!
  • __________
  • Macworld Expo 2010 Hotel Deal
  • TMO on Twitter!

Apple Stock Quote

  • AAPL: $201.46. Change: 0.00.
  • (Prices delayed up to 20 minutes.)
  • Discuss in our Apple Finance Board

Hot Topics

TMO Express

Join the TMO Express Daily Newsletter to get the latest Mac headlines in your e-mail every weekday. Find out more!

Top Deals From DealBrothers.com

Recent Features