Wordpress Tutorials

As many people have become aware of, a Twiter worm broke loose on Saturday, April 11th, which became known as the “StalkDaily Worm.” The creator of website StalkDaily.com (Do not visit), 17 year old Mikeyy Mooney, came clean Saturday evening, in an interview with BNO News.

He stated that he created the worm simply out of boredom, a common theme in malicious computer code. He admitted to having an interest in finding vulnerabilities on sites. He did in fact bring light to a Cross Site Scripting (XSS) flaw, that could have been used much more maliciously. The kid did a service by letting Twitter see the problem in their code, and he got some free advertising for his own website in the process. He says that the code did not steal any sensitive data, or passwords. Examining the code seemed to support his claim, the script grabbed the user’s twitter cookies to make use of Twitter’s API, but no computers were compromised, no accounts were used to steal financial information, no one’s computer was sending cryptic communications to missile silos.

He started by making several accounts, with the worm code embedded into the Bio section on the profiles, the fact this was allowed was the XSS bug he brought to light. Unlike other worms, where you are safe if you don’t click suspicious links, this worm worked by just viewing the infected profile. The script waited for three seconds, before taking the user’s cookies. After which, the worm would add itself into the target’s Bio section, and send out Tweets linking to Mooney’s site. No damage, no ruined finances, just a worm being exposed to the public.

#Mikeyy  #MikeyySucks are the most tweeted hashtags on twitter right now.

What to do ?

To Avoid:

• Use NoScript Addon for Firefox.
• Tweet from Desktop Clients like DestroyTwitter instead of web.
• Do not visit any infected Profiles. As you may not know the Profile is infected or not, Simply do not visit any profile for the time being.

To Fix:

• Go to your browser settings and turn off javascript.
• Go to your Twitter settings and check for anything suspicious, particularly in the URL or location. If there’s anything there, delete it fully and replace with your actual URL and location.
• Re-enable javascript and check the Design section of your Twitter profile to make sure there are no changes to your profile colors. If there are, delete these too and replace with whatever colors you want.
• Delete unwanted Tweets containing Mikeyy
• As an extra precaution, reset your Twitter password.
• Log out of your account and back in.

Are you infected ?

Got any info about the worm ? Anything you’d like to say?

Related posts:

1. Lifestyle on Twitter
2. How Twitter was born ?
3. Twitter Re-Designs Itself