An ingenious, but malicious, new adware scheme targeting MySpace users was revealed by VitalSecurity this morning. The author discovered a MySpace profile that pops-up a licensing agreement for a video on the page - if the user clicks OK, the Zango Adware is installed on his machine. However, the Zango distributor isn't creating all these pages - he's leveraging the MySpace community by providing free, adware-laden MySpace videos through a network of "MySpace code" sites. These include EverythingMyspace, MyspaceGlitters, LoserAlliance, Deltox and Videocodelab.
In many ways, this idea is the same as feeding the MySpace beast - it's free viral marketing by allowing your users to pimp your product. But in this case, it comes with an unexpected payload. In fact, this is part of a much bigger trend towards exploiting MySpace users - searching for "myspace codes" or "myspace videos" reveals a glut of spammy sites.
These one-off attacks won't necessarily scare users away from using codes from legitimate sources- RockYou, Slide, YouTube and Photobucket, for instance - but they do remind us that giving control of a website to inexperienced users can lead to unexpected consequences.
![[img src="" caption="" credit="" alt=""]](http://sale-online.click/wp-content/uploads/2006/07/zangolarge.png){kind=link}