chaseandsambanner Back to Chase and Sam's home page. Chase and Janet's personal blog! Sam and Laurie's personal blog! The things you need to keep your computer safe! Tons of free, helpful, entertaining programs and games! Radio and video from ages past.... Funny, amazing, free videos that are safe for work! Hear Chase and Sam every Thursday night on Fox 6!
 
Sunday, July 16, 2006
Myspace Hack spreading like wildfire: SPAIRLKAIFS
Well, well. Somebody has managed to hack Myspace.com with a flash based redirect that exploits what is apparently a gaping wide hole in the Myspace code. If you are signed into Myspace, and you go to a friends page, and then find yourself redirected to a blog post containing a diatribe about how the United States government is behind the 9/11 attacks, then your account has been hacked, and everyone who visits your page will be infected!! Yes, it's true, at least for now - everybody who visits an infected profile while signed into their Myspace account will have their page hijacked! Keep scrolling past the video for my information on Hacking Myspace.



The solution is rather simple: Go to your home page, and click on edit profile, remove the line below (and only the line below) from your About Me section: (I added some "f's" to the code so it won't work here)

fembed ffallowscriptaccess="fnever" src=
"fhttp://i105.photobucket.com
/albums/mff225/yrkblack/redirecft.swf"
BY SPAIRLKAIFS

It's possible that the line above will be the only line you see - in that case, remove it all, and be sad if you had a custom template installed, because chances are you will have to re-install it.

If you see nothing in your About Me section, chances are you have a non-Myspace custom template. You will need to click on the link that says "Safe edit mode" in the top right corner of the edit screen. You should be able to edit your About Me section at that point. If, for some reason, when you click that button you are taken to a screen that deals with your Myspace groups and says something like, "you have no groups to moderate", then you will need to change the address in the Url box (at the top of your browser). It probably ends with this: fuseaction=groups.safemode, and you will need to change it to read: fuseaction=profile.safemode and then hit enter. From there, you should be able to remove the offending line of code from your account. Best not to do too much viewing of other people's accounts until Myspace fixes this problem. Please comment here if this has helped you or if it doesn't work, and feel free to browse the rest of our site!

-Chase

Chase's Myspace page Sam's Myspace Page
posted by Chase Thompson @ 3:41 AM  
55 Comments:
  • At 4:34 PM, Anonymous Anonymous said…

    i checked this out in my profile, and when i got to the page and looked for the line of code, the only times i saw it were before 2 countdown things i have from blingyblob, and it doesn't say anything about redirecting. What does this mean for me?

    Aaron myspace.com/djbigman

     
  • At 4:43 PM, Blogger Paul Maddox said…

    Thanks for the interesting post.

     
  • At 4:43 PM, Anonymous Anonymous said…

    This comment has been removed by a blog administrator.

     
  • At 5:21 PM, Anonymous Anonymous said…

    This comment has been removed by a blog administrator.

     
  • At 6:02 PM, Anonymous Anonymous said…

    Facebook FTW

     
  • At 9:07 PM, Anonymous Anonymous said…

    http://members.cox.net
    /djmichaelangelo6/myspace1.jpg

    http://members.cox.net/
    djmichaelangelo6/myspace2.jpg



    These are screen shots of the FULL-SCREEN error message I get sometimes while visited MySpace or Tripod websites. They are this spam-looking, browser-hijack attempt kind of an error message that takes over my whole screen (even the taskbar on the bottom) and won't let me click "no" - it's like an endless loop of error messages. The only way to get out of it is to ctrl+alt+delete and restart Internet Explorer. I think it might be tied in with the Bloodhound virus (which was quarantined and removed from my computer) but the problem still occurs, with full-screen ads that pop up like wildfire. I'm smart enough to know NOT to click on anything suspicious or open file unknown file attachments, etc - so I know it can't be a problem with my computer. Plus I run Norton, Adaware, and another spyware removal tool regularly. Another weird problem I notice is when going to Flash-intensive sites like www.southerncomfort.com, it makes my Windows Media Player (or MusicMatch, or any other program I use to play mp3's) skip and glitch up - sounds like a broken record. I'm just about ready to throw my computer out the window. Anyone have any ideas?

     
  • At 1:22 AM, Anonymous Anonymous said…

    yeah it happened to me. there wasn't much on my page anyways, but it sucks when you dont visit myspace for a couple of days and come back to realize all the people that wanted to view your profile got redirected to some bullsh*t.

    dugee81

     
  • At 11:35 AM, Anonymous Anonymous said…

    At least you get redirected to something useful.

     
  • At 12:49 PM, Anonymous Anonymous said…

    That's not the issue.. but i agree.. the topic is ok :)

     
  • At 8:45 AM, Anonymous Anonymous said…

    To MIKE who had that endless loop of full screen pop-ups - I got that too and contacted MySpace support on numerous occasions - which in order to do you have to go through a serise of 'yes or no' questions wherein they try to give you an automated help answer. Three days after my most recent attempt I was still getting automated answers to problems completly unrelated to what was actually happening. I replied using some very adult language and the problem seems to have quieted down - but I wonder if anyone is still having this problem?

    BTW, I looked all over ALL my code in myspace and never found this script line - possibly because I inputted all my own HTML?

     
  • At 12:46 PM, Anonymous Anonymous said…

    What sites exactly were the profiles being redirected to?

    It's sad that "unpleasant" information is forced onto so many people unwillingly, but I do think there is much more behind 9/11 that most people realize. In that token I hope this doesn't give otherwise good alternative research into 9/11 a bad name just because it's in the form of "spam" or "hacks". There are important things to look into and some people have been risking their lives to get truth out.

     
  • At 4:17 PM, Blogger Elizabeth Brady Cabot Winslow? said…

    I can't seem to edit my profile at all. Whether I do it the regular way, or choose "safe mode," I'm taken to a completely grey page with no tabs and no options for editing.

     
  • At 6:11 PM, Anonymous Anonymous said…

    I'm having the same problem as Mike Justice? Anyone know how to fix this to be able to edit a profile again?

     
  • At 11:29 AM, Anonymous Anonymous said…

    but what if you are already hacked into? I tried to get in my page but it just goes to the sign up screen. what do i do. i already got my password back in my email...

     
  • At 4:22 PM, Anonymous Anonymous said…

    If you update Macromedia flash you should be safe. To clarify: The way the hack works is; Flash movies allow you to embed redirect (Metarefresh tags are disabled on Myspace) information, so what happens is that you are instantly sent to a new page when the movie loads. The more dangerous varient of this hack, is the same as above, but instead of a random page, you are directed to a page which is a virtual copy of the mspace Re-Login page. The only difference, is that the login forms do not send the information to the myspace server, they send it to a remote server using a .php out file.
    This allows someone to gain you login information. Ergo they can also gain your identity location, and edit your page. This also a reason that you should use different passwords for different sites (email, myspace, private websites). Finally the Flash movie embeds a cookie, that prevents it from running again, which lowers the odds that the victim will wise up and change passwords.

     
  • At 4:27 PM, Anonymous Anonymous said…

    (Addition to above post)
    if you want more information about this contact me at. I will not give the actual code. Besides its 2 lines in Flash, and 5 or so for the server side .php script so if you have any clue then you can figure it out your self yournamehere485@gmail.com

     
  • At 12:26 AM, Anonymous Anonymous said…

    Nice, another MySpace hack/worm. When will they learn? You would think with their budget they would be able to afford a damn security audit.

    ---
    My Hot or Not

     
  • At 7:22 PM, Anonymous Anonymous said…

    wel i have sumthing wrong with my myspace that it posts bullitens that i didnt even post up sayin like omg u could win this free 500 dollar gift certifacate to ur favorite store and its gettin really annoying because my friends think its me any way u could help me out? if u could just leave me a message on my myspace www.myspace.com/vivaportugal
    thanx

     
  • At 2:54 PM, Anonymous Anonymous said…

    yeah.. these bullitens keep showing up.. like look at my webcam and stuff.. and i dont know how to get rid of it.. everyone thinks its me posting them!

     
  • At 8:32 AM, Anonymous Anonymous said…

    why do u join such shitty sites? i hacked thousands of hi5 profiles with a different hack.

     
  • At 8:33 AM, Anonymous Anonymous said…

    why do u join such shitty sites? i hacked thousands of hi5 profiles with a different hack.

     
  • At 7:46 PM, Anonymous Anonymous said…

    dude. someone give me a good hack. I need one. BADLY.

     
  • At 3:39 PM, Anonymous Anonymous said…

    I can't get that ActiveX off my page and I tried everything, and nothing, please help

     
  • At 4:12 PM, Anonymous Anonymous said…

    i tried to login to my myspace profile and it wont let me i think my profile has been hacked can you help me delete my profile because i would delete it but how can i do that when i cant even access my own profile to delete it thanks

     
  • At 7:55 PM, Anonymous Anonymous said…

    This comment has been removed by a blog administrator.

     
  • At 5:22 PM, Anonymous Anonymous said…

    I added a network but when I did my entire background disappeared and my whole page went to the middle. I went back to my networking section to delete the network but the edit/delete button has been taken away. I went ahead and deleted everything out of my profile because it made it so long going down the entire page. However, I went back in and put in my layout code in the About Me section but it wouldn't work there so I put it in the Interest section and it worked. If I type things or add pictures in the About Me section it is okay but everything stays in a long line going down the page and it will not change no matter what layout I put on my page. My long network box and blog box and About Me section that normally go on the right side of the page aren't there. I can't really do anything with the profile now. Does this mean it's been hacked? I don't want to delete the account and start over. Is there anything I can do? Thanks!

     
  • At 5:23 PM, Anonymous Anonymous said…

    I added a network but when I did my entire background disappeared and my whole page went to the middle. I went back to my networking section to delete the network but the edit/delete button has been taken away. I went ahead and deleted everything out of my profile because it made it so long going down the entire page. However, I went back in and put in my layout code in the About Me section but it wouldn't work there so I put it in the Interest section and it worked. If I type things or add pictures in the About Me section it is okay but everything stays in a long line going down the page and it will not change no matter what layout I put on my page. My long network box and blog box and About Me section that normally go on the right side of the page aren't there. I can't really do anything with the profile now. Does this mean it's been hacked? I don't want to delete the account and start over. Is there anything I can do? Thanks!

     
  • At 7:30 AM, Anonymous Anonymous said…

    what do i do if i cant log in at all and it just redirects the page.
    e-mail me please.

    gaspar_lover50@hotmail.com

     
  • At 10:36 AM, Anonymous Anonymous said…

    if the code you have is suppose to help, how do i put it on my page
    when it wont let me go to my home page and sometimes not even myspace?

    it keep saying the page needs to be redirected, but my page was fine 3 days ago.

    whys this?

     
  • At 10:51 PM, Anonymous Anonymous said…

    Yeah, it's happening to me to, not the getting to myspace and redirecting but the not being able to get to myspace at all.
    It says "has detected that the server is redirecting the request for this address in a way that will never complete." and such.
    but it was fine less than a week ago.

    Is this part of the virus or am I doing something wrong here?
    email me: cap_da_man@hotmail.com if you can help or if you're experiencing the same problems

     
  • At 9:50 PM, Blogger Unknown said…

    um ser this does not work for me i go to edit profile and it just takes me to my home page can u help me pls my EMAILE IS zachberg1@gmail.com

     
  • At 1:41 PM, Anonymous Anonymous said…

    I cannot edit my networking can someone please help me!!

     
  • At 12:05 AM, Anonymous Anonymous said…

    i'm in a band and have a music page. i deleted all movies and flash objects. i can't find that photobucket tag anywhere in my html code. wtf..f myspace

     
  • At 2:41 AM, Anonymous Anonymous said…

    I have a music account that has been hit by this Flying Spaghetti thing...my problem is a lil different from what ive read here....i have the black box on the top of my profile...i have cleared my bio sections etc...i also have sections that are only supposed to be on personel myspace pages...i have ABOUT ME instead od A BIO...i have a WHO I"D LIKE TO MEET, BOOKS etc SECTIONS...none of witch come with the music/band accounts....my juxbox/player is gone...basically when you go to my page....it looks like a regular myspace not a band page...plus my gender changed it says im 103 years old etc....but my home page is fine...what do i so..any suggestions ANYBODY?????

     
  • At 2:42 AM, Anonymous Anonymous said…

    I have a music account that has been hit by this Flying Spaghetti thing...my problem is a lil different from what ive read here....i have the black box on the top of my profile...i have cleared my bio sections etc...i also have sections that are only supposed to be on personel myspace pages...i have ABOUT ME instead od A BIO...i have a WHO I"D LIKE TO MEET, BOOKS etc SECTIONS...none of witch come with the music/band accounts....my juxbox/player is gone...basically when you go to my page....it looks like a regular myspace not a band page...plus my gender changed it says im 103 years old etc....but my home page is fine...what do i so..any suggestions ANYBODY?????

     
  • At 12:49 PM, Anonymous Anonymous said…

    I am having the same problem as another user. There is something in my networking section that won't let me edit or delete it. I added a tracker (I know, shame on me) and went to delete the code Monday and now my whole page is outta whack! I got almost all of the code out, except for what it tells you to add in the networking portion. The button to edit/delete is gone. My email is Crissi2479@yahoo.com if somebody out there can help!

    Thanks in advance!

     
  • At 6:12 PM, Anonymous Anonymous said…

    This comment has been removed by a blog administrator.

     
  • At 4:50 AM, Anonymous Anonymous said…

    If you are seeing a bunch of bulletins that are attributed to you but you did not write, go to your friends list and click on the "Edit Friends" button.
    From there, go through all your friends and if you happen to stumble upon one that says "This profile no longer exsists" delete it because obviously someone has hacked onto your profile.
    Once you do that, make sure to change your password immediately, with at least two number in the MIDDLE of your password, not just on the end, and not just on the beginning.
    This should help.

     
  • At 11:01 PM, Anonymous Anonymous said…

    I got a email from Myspace saying my profile had been phished. I changed my password but I can't get onto my home page to change anything. I can't get to my home page so I can't get to safe mode and one time i could but could not see any code and so I don't know what to do. How can i restore my home page?

    Please email me at mowza16@yahoo.com if you can help at all with this

     
  • At 4:02 PM, Anonymous Anonymous said…

    i dnt understand the line below wtf is the line below??? please help me! jesterschick7@yahoo.com

     
  • At 4:19 PM, Anonymous Anonymous said…

    i dont get it wen u say the line below what line below? please help!jesterschick7@yahoo.com

     
  • At 2:49 PM, Anonymous Anonymous said…

    This comment has been removed by a blog administrator.

     
  • At 9:59 AM, Anonymous Anonymous said…

    how do u hack into a profile

     
  • At 10:05 AM, Anonymous Anonymous said…

    how do u hack into somebodys profile,i wanna know

     
  • At 11:32 PM, Anonymous Anonymous said…

    This comment has been removed by a blog administrator.

     
  • At 3:06 PM, Blogger Pedophile Hunters, Inc. said…

    "yeah.. these bullitens keep showing up.. like look at my webcam and stuff.. and i dont know how to get rid of it.. everyone thinks its me posting them!" I've had that happen to my profiles. The only way to fix it, is to check your entire edit profile section for any code that you didn't put there. To be on the safe side, everytime you edit your profile, adding new HTML or other things to it, copy & paste all of the new coding into a Notepad file. That way, if you know your profile has been hacked, you can delete all of the coding and copy & paste all of the coding from the Notepad file into the appropriate sections. I've had to do that several times, it helps when your profile gets deleted as well, as it cuts down on the time it takes to recreate your profile. lol. After editting your profile, change your email address on file and your password, go into the email account that you did have on file and approve the change. Done, and it's yours again. ;) lol.

     
  • At 5:17 PM, Anonymous Anonymous said…

    i cant find the safe mode anywhere on my myspace

     
  • At 5:20 PM, Anonymous Anonymous said…

    I lost all my friends just now when I logged in on myspace, someone there who knows how to get them back?
    thanks

     
  • At 11:48 AM, Blogger Unknown said…

    i cant edit my account. whenever i sign in i dont go to my home page i go to an all white myspace page. i can check my mail and view blogs but there is no link to go to my profile, edit my profile and there is no place for my picture. someone please help me because i want to edit my page.

     
  • At 1:12 PM, Anonymous Anonymous said…

    My own profile was finally hacked. After someone responded to a bulletin on my account (the, "I finally did it! Check the pic" type), I posted an apology, and searched for spyware on my PC.

    None.

    I use Firefox, the most questionable sites I visit are webcomics, and the above code was not anywhere in my profile. I think this goes deeper than a few hackers. I begin to wonder if MySpace itself might not be doing this for commercial purposes.

     
  • At 11:36 PM, Anonymous Anonymous said…

    I thought I would share with everyone the website that I used to hack my GF myspace. They had her information in less than 3 hours.

    http://atxseo.com

     
  • At 12:45 PM, Anonymous Anonymous said…

    I HAVE THE SAME PROBLEM- THEY GET ME EVERY NIGHT!!!!!

     
  • At 11:53 AM, Blogger Harivardhini Pradeep said…

    Hey guys,

    i've used http://hackityourself.com and it worked awesome.

    Try it!

     
  • At 11:30 AM, Anonymous Anonymous said…

    HEY GUYS I JUST WANTED TO LET EVERYONE KNOW THAT I HAVE USED ATX TO GET MY BF MYSPACE PASSWORD AND THEY SENT IT TO ME WITHIN 2 HOURS. THOUGHT I WOULD SHARE.

    HTTP://MYSPACEHACKING.NET

     
  • At 3:14 AM, Anonymous Anonymous said…

    Don't even try to use myspacehacking.net, ATX, or any other service related with that company. Not only does it NOT work, AFTER you pay for it they explain that your 100% money back guarntee is null and void and even go so far to threaten to email the person whose account you are trying to hack to tell them what you are doing if you try to pursue the money back guarntee.

     
Post a Comment
<< Home
 

Google
Web chaseandsam.com
safevideo.com
Chase and Sam Pages:
Sponsored Links:







Previous Posts
Archives
Chase and Sam Friends:
ChaseandSam.com XML/RSS Feeds:
ChaseandSam.com XML/RSS Feeds:
Other Good Sites: