MySpace.com wants Apple Computer to update QuickTime media player software so it can not be used in attacks on the social-networking site. The worm spread because of QuickTime's support for JavaScript code. When viewed in Internet 
Explorer or Firefox, the specially crafted QuickTime video added itself to the user's MySpace page and replaced the links on the user's profile with links to phishing Web sites. The malicious software, dubbed Quickspace by F-Secure, infected a large, but unspecified number of MySpace users. Apple is working on a QuickTime fix, but has a temporary solution available Tuesday. The object of the Quickspace attack was to get people to visit the fraudulent Web sites crafted to look like MySpace log-in pages.
Explorer or Firefox, the specially crafted QuickTime video added itself to the user's MySpace page and replaced the links on the user's profile with links to phishing Web sites. The malicious software, dubbed Quickspace by F-Secure, infected a large, but unspecified number of MySpace users. Apple is working on a QuickTime fix, but has a temporary solution available Tuesday. The object of the Quickspace attack was to get people to visit the fraudulent Web sites crafted to look like MySpace log-in pages.
Comment Preview