MySpace is under attack again. According to Marshal's TRACE team, it involves spam that pretends to be a legitimate invitation to join MySpace. It contains a link that redirects to a fake MySpace page. Once there the user is prompted to update adobe flash player. If they accept the download, malware is downloaded to their computer, turning it into zombie and making it part of a botnet. The affected computer then starts sending phishing emails targeting major US banks.

"We saw sites such as YouTube targeted in these kinds of malware distribution campaigns last year. It follows that social networking sites would be next on the spammers list of targets to exploit, although this newest campaign arrived a little sooner that expected. This attempt to exploit MySpace is simplistic but effective," said Bradley Anstis, Marshal's VP of Products.

It is not yet clear if the botnet in question is controlled by the Storm Worm or a single hacker or gang.