Comments on: Twitter StalkDaily Worm Postmortem

By: Twitter Worm Outbreak Over Easter – Security Threat Research News

Twitter Worm Outbreak Over Easter – Security Threat Research News — Sat, 12 Dec 2009 12:11:52 +0000

[...] More info on the technical internals of the attack are available at dcortesi.com. [...]

By: Explanation of How My Twitter Account Was Hacked | The Aggregator

Explanation of How My Twitter Account Was Hacked | The Aggregator — Thu, 08 Oct 2009 11:43:49 +0000

[...] fought off four waves of worm attacks created by Mikeyy Mooney. Damon Cortesi wrote an excellent postmortem post that explains exactly how the worm worked and what code was [...]

By: はまち on Twitter « 情報セキュリティ備忘録

はまち on Twitter « 情報セキュリティ備忘録 — Fri, 25 Sep 2009 04:57:09 +0000

[...] on Twitter 中身はこの辺やこの辺に。みんな楽しそうに見えるのですが… [...]

By: Week 3 « Week3 Enterprise 2.0

Week 3 « Week3 Enterprise 2.0 — Wed, 12 Aug 2009 07:34:50 +0000

[...] An additional interesting blog is about about Twitter black-out that happened couple of days ago, the user explains in detail what really happened to Twitter becoming unavailable.http://dcortesi.com/2009/04/11/twitter-stalkdaily-worm-postmortem/ [...]

By: Twitter: Under attack | tempebasah media

Twitter: Under attack | tempebasah media — Fri, 07 Aug 2009 08:33:38 +0000

[...] also become infected just by looking at a compromised Twitter profile page. For those so inclined, Damon Cortesi has posted a blog that takes an in-depth look at how the worm [...]

By: SChalice

SChalice — Wed, 22 Jul 2009 20:41:50 +0000

“Thinking team twitter did well.”

Thinking they are foolish.

By: 5 XSS Exploits You Should Know About (& how to prevent them) | Deadly Technology

Fri, 19 Jun 2009 15:35:41 +0000

[...] and executed consistently. An excellent example of stored cross site scripting is the recent Mikeyy Stalk Daily worm attack on Twitter. Mikeyy’s code was stored in the profile data for twitter users and was subsequenty [...]

By: Web API a bezpečnosť

Web API a bezpečnosť — Tue, 16 Jun 2009 16:35:49 +0000

[...] Mikeyy worm17 ročný mladík, Michael Mooney, sa preslávil za niekoľko hodín vytvorením červa, ktorý zneužíval zlú filtráciu prichádzajúcich správ. [...]

By: Security Justice » Blog Archive » Security Justice - Episode 12

Security Justice » Blog Archive » Security Justice - Episode 12 — Mon, 04 May 2009 02:24:49 +0000

[...] Twitter StalkDaily Worm Postmortem [...]

By: Jake Kasprzak Online › The Twitter XSS Worm and Lessons That Can Be Learned From It

Mon, 27 Apr 2009 23:50:23 +0000

[...] This worm infected the profiles of Twitter users so that they contained malicious code. Logged-in Twitter users who would view one of these infected profiles would then, through execution of the JavaScript injected into these profiles via an XSS hole, have their own profiles infected with the same code. Therefore, propagation of this worm occurred via logged-in Twitter users simply viewing infected profiles. The source code used by this worm can be viewed here. As one can see by viewing this source code that is called from infected Twitter pages, it injects the malicious script and other data that would appear in profiles when they are infected with this worm. Damon Cortesi gives a good analysis of the worm here. [...]