Looks like it's a bad time for all major social networks out there. Recently, Twitter faced an attack by hackers after a security flaw was unearthed by a user. Soon after, Facebook saw its worst downtime in four years and now its Orkut's turn to be under attack by a worm known as Bom Sabado.
If you are in a country which hasn't heard of Orkut, let us inform you that this Google-owned website is the most used social network in Brazil - with a significant number of users in India too. While it may be small compared to Facebook (which boasts of half a billion users), 52 million active Orkut users is, by no means, a small number.
Anyway, as for the Bom Sabado worm, it is a JavaScript based worm that spreads itself through Orkut scraps (the Orkut equivalent of a Facebook wall scribble). The worm is an auto generated message which might look like just another scrap from your buddy. The scrap actually embeds a malicious JavaScript code which infects the profile of the person as soon as he opens the scrap page. Soon after this, the code is executed and it will make the user join bot communities automatically. The worm then starts posting similar scraps to the user's friends using his name, thereby spreading itself. The worm also steals browser cookies.
Orkut has now posted an entry at its support site where it says that the worm is now contained. If you were affected by this, make sure you clear all your browser cookies and more importantly, change your Orkut password.
hi thanks for ur post……..i tried all ur countermeasures against bom sabado…..delete cookies,change password ………..but now i dont have any more access to my account…….it shows wrong password,,,,,,,,,,,, i think i lost my account…
can u help me to get back my account????????????
plz help
I have received scraps from many of my friends containing "Bom Sabado"...
How can it affect me...........???????
I have deleted my cookies and all the browsing data.....
am i safe now if i dont use orkut ???????
It s not a serious one and now resolved.What it does is automatically ur profile will be joined to some vulgar communities(brazil origin) and scrap 'BOM SAMBADO ' message to all of your friends.This will happen as soon u logged in.Now all resolved and one thing to note is ...Dont click on that community for unjoining for another 2-3 days...becasue it will hang ur browser and may get affected again....happ orkuting !!!
Do we need to change our password on other websites also.
Which we have visited after being infected by this worm??
Does it limits to 1 brrowser itself where we have accessed it , or other browsers in the system also??