XSS flaws allow hackers to inject malware by deceiving a browser that the file sent is from a reliable website. The infection occurred with the exploitation of a security hole that an XSS fault created in a code designed by Google webmasters. Consequently, people who opened the e-mail too were infected. The virus added a malicious code of a Flash-based JavaScript onto the profile of a user and then e-mailed a note to all the addresses on the victim's contact list. PCWorld published this in news on December 19, 2007. The affected users received e-mail informing them that another user on Orkut had sent them an entry for Scrapbook on their profile.īy simply viewing the profile page, the worm infected the users who were added to the Orkut group called 'infectados pelo Virus do Orkut' meaning 'infected by the Orkut virus', wrote Kee Hinckley, a blogger of the site TechnoSocial. Worm on Google’s Orkut Infects Users RapaciouslyĪ Portuguese worm that spreads rapidly hit the Orkut social networking site of Google and infected numerous users.

Google worm virus