Google's Orkut fights off worm attack

A computer worm has been spreading on Google's big-in-Brazil Orkut social network, according to a report on the Sounds from the Dungeon blog.

The relatively harmless worm appears to use JavaScript and Flash code to create new scrapbook entries on profiles with a New Year's message in Portuguese before propagating to the victim's friends.

It may have infected as many as 400,000 users, according to a post on a blog called "c0d3w12."

According to the Packet Storm security site, a vulnerability affecting Orkut was discovered November 8 and fixed last week. It was not clear whether this was the same vulnerability that was allowing the worm to spread.

"It appears Google has responded quickly," writes a blogger on ValleyWag. "Too bad. If Google had let the worm rampage, maybe some American users might actually hear about Orkut for the first time."

A Google representative sent this e-mail comment: "Google takes the security of our users very seriously. We worked quickly to implement a fix for the issue recently reported in orkut. We also took steps to help prevent similar problems in the future. Service to orkut was not disrupted during this time."

Source : http://www.news.com/8300-10784_3-7-0.html?categoryId=9702220&tag=sb_cat

Regards
Sakthi