MySpace profiles vulnerable to hackers

By Janine de Blois

Tfactory Trojan, which has been around for over a year, was discovered by McAfee on MySpace disguised as a Microsoft update. This is one example of how users’ should exercise caution when browsing sites.

A popup window offers current update of Microsoft’s Windows Malicious Software Removal Tool. This is actually part of a larger image that covers almost the whole computer screen. Clicking anywhere on it begins a download of the malware.

It is not known whether the hackers found a flaw in the MySpace code or, more likely, plished the password and username of a MySpace member. Another attack code was launched as recently as November from a number of musicians MySpace profiles.