New Orkut Virus: Bom Sobado (Good Saturday in Portuguese!)
The BOM SOBADO virus has struck Orkut and all the Orkut users are warned that if you receive any message from your Orkut friend that contains these words; DO NOT visit their profile!
If you visit the affected profile, a script will get activated on your profile which will update your status message and send the affected message to everyone in your contact list and the virus will keep spreading.
If your profile has been affected with the virus, please change your Google Account password immediately.
If anyone's got more information about the virus, please update this thread immediately.
If you visit the affected profile, a script will get activated on your profile which will update your status message and send the affected message to everyone in your contact list and the virus will keep spreading.
If your profile has been affected with the virus, please change your Google Account password immediately.
If anyone's got more information about the virus, please update this thread immediately.
Replies
-
Whats In NameThanks alot Biggie,for informing. -
Kaustubh KatdareFurther virus details -
Bom Sabado is a cookie stealing virus. Those who are affected by this virus try to change their password as soon as possible and also clean your browser cookies.Orkut officials havn’t given out any details of the scrap virus. Its safe to keep away from opening your orkut until orkut official give out the status of the attack.However, it is not clear yet that the Bom Sabado is a virus or not. But the Orkut user who have faced this problem are advised to change your password and security question. Log out immediately and clear the cookies and history.Users are also advised not to open such scraps. The bug is hitting your cookies and automatically sending messages to your friend list.
Source: #-Link-Snipped-#
The worm injects a hidden iframe containing a malicious javascript .js [do not click this], which steals the user cookie which contains the password in an encoded form. So the attacker do not get to know your plaintext password but can login using your credentials by impersonating using the cookie to fool the identification system. So a trivial solution is to diable javascript, another solution is to disable iframes or u can take an advanced measure by blocking the domain by editing your hosts file and redirecting it to a safe address, say 127.0.0.
DO NOT login to Orkut for next ~48 hours or some update from Google. -
PensuI got this scrap form 3 guys.....i was thinking this is surely a virus....thanks for the info biggie....
-
SRRSHello,thank u guys,i also got this from my friends.but i did not visit their profile .is there any need to change my password?
-
Kaustubh Katdare
Well, it would help if you change your password and not visit the site for next 48 hours. Google will soon release a statement. Be sure to clear your web browser cookies before you visit the site.SRRSHello,thank u guys,i also got this from my friends.but i did not visit their profile .is there any need to change my password? -
Manish Goyal
-
Saandeep SreerambatlaI dont have a orkut account , I deleted it 😀
Yahoo!! -
Reya@Biggie thanks for the valuable information.
-
Kaustubh KatdareThankfully, there are no Facebook viruses (yet). Facebook itself is a virus that's spreading like umm...what?
-
ReyaIf facebook viruses exist then everybody will be in trouble!!thank god..
You are reading an archived discussion.
Related Posts
This task has been topping the CE priority list for long.
We are in the process of changing the CE Members Titles and ID Colors.
We will be keeping some...
Tell us how will you spend your first salary; or if you are employed, how did you spend the first salary?
Did you blew it off on parties? Or did...
Sure, you are hooked to the Facebook! Now Hollywood is ready with the movie based on the founders of Facebook and how Facebook came to life. The title of the...
Telecom Regulatory Authority of India (TRAI) Chairman, Dr J. S. Sarma, has confirmed that Mobile Number Portability (MNP) that allows mobile subscribers to retain their existing number while changing the...
CEans,
We are happy to announce that we are now open to all the media partnership requests for your college events. If you are organizing techfests to sports meet to...