Phishers Compromise MySpace Accounts

by certifiedbug on October 28, 2006

in Security

The MySpace saga continues:

Netcraft has discovered that the social networking site, MySpace, appears to have been compromised by phishers who have presented a spoof login form on the main site. This modified login form is designed to submit the victim’s username and password to a remote server hosted in France.

Article

PCWorld Reports that the attack was shut down by MySpace around 10 a.m. Pacific this morning.
Apprantly the attacker had registered an account named login_home_index_html, therefore the MySpace page hosting the fake login appeared to be a legitimate place where users could sign onto the service.

If, as is typical with such sites, MySpace has a database of user names that are off limits why did they allow the registration of login_home_index_html ?

Beats me and just another reason MySpace is blocked in my household.

Previous post: Halloween Exploits and Cactus Vxgame Sites to Avoid

Next post: Zango-180Solutions deactivating some sites