full-disclosure - Orkut exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <2f6cb7b40606281247p2b31679fl5374705e5ed36bbd@mail.gmail.com>
Date: Wed Jun 28 20:47:57 2006
From: nocfed at gmail.com (nocfed)
Subject: Orkut exploit

On 6/28/06, Ademar Gonzalez <ademar.gonzalez@...il.com> wrote:
> Don't know if you guys have seen this. Just got it in my gmail
> account, it tries to execute the file scrapbook.exe from :
>
> http://www.yourfreespace.net/users/orkut2/scrapbook/scrapbook.exe
>
> Karpesky says is Trojan-Spy.Win32.Banker.anv
>
> attached is the original emai.
>
> ciao ciao
>
> ademar
>
>

In what way is this an "Orkut exploit" as the subject of the mail
describes?  This is more of an "Idiot exploit"...