View Single Post
  #2 (permalink)  
Old 21st December, 2007, 04:42 AM
Áedán's Avatar
Áedán Áedán is offline
Chief Systems Administrator
 
Join Date: September 2001
Location: Europe
Posts: 12,336

It's an interesting interaction between flash and JavaScript. My understanding is that Orkut allows your friends to use arbitrary HTML commands. This was used to load up a bit of flash that downloaded a JavaScript file and execute it (from hpp://files.myopera.com/virusdoorkut/files/virus.js).

The JavaScript uses Web 2 technologies (AJAX) to do it's stuff, so that you don't see it working. Roughly, it does the following:
  • Joins you to a community (/CommunityJoin.aspx?cmm=44001818)
  • Uses the Compose.aspx in order to gain a list of your friends
  • Sends each one a scrap containing the JavaScript

There doesn't appear to be any payload attached to it, so it just infects a bunch of people and then does nothing.
__________________

Last edited by Áedán; 21st December, 2007 at 04:42 AM.
Reply With Quote