Orkut Scraps Propagating Malicious Code

Social networking sites with large user bases are attracting more attention as malicious code propagation vectors these days. There have already been a few worms that have circulated through social networking sites.

This isn’t the first worm on Orkut, and the worm works in a similar manner to its predecessors by using “scraps”- messages considered part of a “scrapbook”. A user receives a scrap from an acquaintance containing a pornographic image that is designed to look like a Flash movie. If the user clicks on the image file, in an attempt to play the “movie”, they are directed to a malicious Web site.