More malicious code has been developed that when inserted into a MySpace page, it tricks the user into downloading malware as a masqueraded Microsoft Update.  While this may seem like an easy thing to spot, it really isn’t, especially when your mind is focusing on other things such new Comments or Messages on your MySpace page.  These so called ‘updates’ really look like the real thing so, if you are browsing MySpace pages and are all of a sudden prompted for a Microsoft update, play it safe by saying No and manually going to Microsoft’s webpage and checking for updates on your own.

There’s now one more reason to be security-conscious while using MySpace.com: fake Microsoft updates.

Using a hacked MySpace profile, online criminals are trying to trick victims into downloading a malicious Trojan Horse program by disguising it as a Microsoft update, according to researchers at security vendor McAfee.

The attack is certainly not widespread — McAfee has seen it used on only one MySpace profile — but it does show how sites such as MySpace can be abused by criminals.

Web surfers are presented with what appears to be a popup window advising them to download the latest version of Microsoft’s Windows Malicious Software Removal Tool, which was just released this Tuesday. This software is distributed by Microsoft to help Windows users rid their systems of malware.[more]

Tags: Malware