A new version of the Mikeyy cross-site scripting worm is spreading extremely rapidly across the Twitter micro-blogging network.
Messages posted by the worm include:
@oprah – sup? welcome to twitter. – mikeyy
@TheEllenShow – hey baby, love me long time? – mikeyy
@nytimes – yep, it’s true. – mikeyy
@StephenColbert – you funny. – mikeyy
@aplusk – hey, homo. – mikeyy
@souljaboytellem – your music sucks dude. – mikeyy
The worm appears to be deliberately referencing Twitter users with a very large number of followers (for instance, @aplusk is Hollywood actor Ashton Kutcher who has more than a million followers), presumably with the hope of spreading the infection more quickly.
Compromised accounts appear to have their profiles altered to reference Mikeyy.
My recommendation? If you are going to click on users’ profiles on Twitter right now make sure that your browser is fully patched and that you have scripting turned off using plugins like…
Read more in my article on the Naked Security website.
Found this article interesting? Follow Graham Cluley on Twitter to read more of the exclusive content we post.