Teenager uses a Worm to promote a Site

By Derek Sooman on October 19, 2005, 8:06 PM
A Los Angeles teenager has used a self-propagating worm that exploits a scripting vulnerability to make himself the most popular member of community Web site MySpace.com. The attack caused little damage, but security professionals are concerned that it could be used to destroy Web site data or steal private information.

The unknown 19-year-old, who used the name "Samy," put a small bit of code in his user profile on MySpace, a 32-million member site, most of whom are under age 30. Whenever Samy's profile was viewed, the code was executed in the background, adding Samy to the viewer's list of friends and writing at the bottom of their profile, "... and Samy is my hero."

"This is an attack on the users of the Web site, using the Web site itself," said Jeremiah Grossman, chief technical officer at WhiteHat Security.




User Comments: 4

Got something to say? Post a comment
nimo333 said:
Cool, that's a pretty thoughtful idea, I don't support bad hackers but this kid is smart and all he did is posting his name; so he surly did no harm. But as usual, the companies think all hackers are bad, (except for the ones they hire!)
spike said:
Oh, he certainly caused harm. He just had no idea that he would cause harm when he did it.To be honest, I also seem to have a bit of a soft spot for this kid. To write his script, he spent an hour a day learning a new language for a week, and then a short time putting it together. This was just a bit of fun that went horribly wrong I think - just to see if he could do it.
howard_hopkinso said:
[b]Originally posted by spike:[/b][quote]Oh, he certainly caused harm. He just had no idea that he would cause harm when he did it.To be honest, I also seem to have a bit of a soft spot for this kid. To write his script, he spent an hour a day learning a new language for a week, and then a short time putting it together. This was just a bit of fun that went horribly wrong I think - just to see if he could do it.[/quote]I do see you point Spike, but would you still feel the same, if someone did the same thing at Techspot?I know I`d be very annoyed, but maybe that`s because I have an intense dislike for virus/worm writers.Regards Howard
spike said:
Absolutely Howard, and I'd be very upset if it happened to Techspot. I think though that I like him for the way he went about it also. Instead of going for the obvious and widespread method of writing a worm attacking computers to do the work, he simply wrote a script that was completely limited to MySpace.I'd still be upset if it happened to techspot though, but if it was done the way this kid did it, I would want to offer him a little more mercy than if it was a DDoS from a botnet or similar (not that i'd have anything to do with the outcome).
Load all comments...

Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.