Worms Dig Up Twitter
Saturday, September 25th, 2010Worms are big things in the antivirus software industry and they have been playing havoc with short message website Twitter.
The Twitter engineers have had to work hard to plug gaps in their code which means that a flaw could be exploited by what the antivirus software industry call cyber criminals to embed pop-up messages which create links to porn sites.
At first users of Twitter only had to let their mouse mover over the message which had the embedded link and a new website (often porn related), would open in the browser. Quite a shock if you were wanting to read a Tweet from your favourite celebrity and all you got was a website dedicated to other matters. What worried the engineers most of all was that you didn’t even have to click on the link – just moving the mouse across the message was good enough to activate the url.
A worm, in antivirus software jargon, is a self-replicating piece of code which can cause havoc in a computer’s innards.
Security chief at Twitter Bob Lord wrote in a blog:
“This issue is now resolved. We apologise to those who may have encountered it. Users may still see strange retweets in their timelines caused by the exploit. However, we are not aware of any issues related to it that would cause harm to computers or their accounts. User account information was not compromised.”
It’s not the first time Twitter has been targeted and it certainly won’t be the last. A number of major Twitters were caught out by the problem, including, says the BBC, the wife of the former Prime Minister, Sarah Brown.
The embarrassing problem popped up for Twitter just after a major redesign job on its site. Interestingly, those people who used a third party website to read, or send Tweets, didn’t have the problem.
Experts say the problems lies in a cross-site scripting (XSS) vulnerability. This is a flaw which can be easily exploited by malicious code. In this incident, a command was written in the popular JavaScript which automatically directed people towards other websites, many of which were pornographic.
For anyone who understands coding and how it can be manipulated for nefarious reasons, a worm can be quickly written and then exploited on such websites as Twitter, much to the annoyance of antivirus software companies.
It’s reckoned that about 200,000 messages were compromised and observers believe that Twitter, which has been attacked on a large number of occasions, has to do more to protect its users.
Guest Article by Neil Camp


My name is Alan Potts and I'm the Editor of the Antivirus-BUYability web site and Managing Director of BUYability Limited. You can connect with me or keep up to date with new posts on this blog via the following social media sites: 








