New Orkut Worm: “Bom Sabado!”
ID: 1be3f2b0-09f2-5b70-a85f-fcf86d39769b
STIX ID: report--1be3f2b0-09f2-5b70-a85f-fcf86d39769b
Feed Name: Zscaler Security Research Blog
Threat Score
A 25 September 2010 Orkut worm spread via a malicious iframe referencing tptools.org/worm.js; the obfuscated JavaScript enumerated friends, posted "Bom Sabado!" messages with embedded hidden iframes to propagate, and forced infected accounts to join several fake Portuguese communities (several community URLs listed). The worm did not appear to exfiltrate data but infected many users quickly before the malicious site went offline.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.