Mikeyy worm targets Oprah, New York Times and others

Graham Cluley

A new version of the Mikeyy cross-site scripting worm is spreading extremely rapidly across the Twitter micro-blogging network.

Messages posted by the worm include:

@oprah – sup? welcome to twitter. – mikeyy
@TheEllenShow – hey baby, love me long time? – mikeyy
@nytimes – yep, it’s true. – mikeyy
@StephenColbert – you funny. – mikeyy
@aplusk – hey, homo. – mikeyy
@souljaboytellem – your music sucks dude. – mikeyy

The worm appears to be deliberately referencing Twitter users with a very large number of followers (for instance, @aplusk is Hollywood actor Ashton Kutcher who has more than a million followers), presumably with the hope of spreading the infection more quickly.

Compromised accounts appear to have their profiles altered to reference Mikeyy.

My recommendation? If you are going to click on users’ profiles on Twitter right now make sure that your browser is fully patched and that you have scripting turned off using plugins like…

Read more in my article on the Naked Security website.

Found this article interesting? Follow Graham Cluley on Twitter to read more of the exclusive content we post.

Graham Cluley is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s when he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows. Now an independent security analyst, he regularly makes media appearances and is an international public speaker on the topic of computer security, hackers, and online privacy. Follow him on Twitter at @gcluley, or drop him an email.