Yesterday Patrick wrote about a Twitter worm exploiting an XSS vulnerability in Twitters profile page. Besides the original worm that was supposedly written by a teenager Mike Mooney there are some copycats out. The copycat Twitter XSS worms exploit the same vulnerability – actually most of the code remains the same but they obfuscated it to make analysis a bit harder. They also added couple of updates so it looks like they are exploiting other profile setting fields which the original worm didnt exploit, such as the profile link color.

Telephone: (617) 571 1212
Website: http://isc.sans.org/