New Myspace Phish Using Css

This afternoon we discovered another attack on Myspace. MySpace users receive a message in their profile from someone called "Arnelle" with the following text:

"this chick is using like almost all of ur pix and part of ur profile.. people have no lives, i swear. heres the URL if u want to check it out"

Followed by a link to their Myspace page. The page itself is hosted within the Myspace.com domain and is a users profile page. Upon accessing the site the user is presented with their login credentials.

A couple things to note here. The code writer took special note to change the authentication picture to show that it says, ?profile.myspace.com? instead of ?login.myspace.com? as it normally should. One mistake the code writer made was that he did not create a password field which hides the password while the end user types it in.

Article

ZOMG!

Who would want to steal your MySpace account? lol! :D

MySpace is the dumbest place ever, so much dumb retarded kids who cant think or spell.

If retards could fly, MySpace would be an airport.

PS. Samy is my hero!

If retards could fly, MySpace would be an airport.

:lol:

On a serious note it is sad to see so f'n many legit sources like music artists, movies, television shows, etc., using that site.