Samy (computer worm)

Samy (also known as JS.Spacehero)[1] was an XSS worm developed to propagate across the MySpace social-networking site. At the time of release, it gained significant media attention.

Samy Kamkar, the author of the worm, entered a plea agreement on January 31, 2007 to a felony charge.[2] The action resulted in Kamkar being sentenced to three years probation, 90 days community service, and an undisclosed amount of restitution.

The worm carried a payload that would display the string "but most of all, Samy is my hero" on a victim's profile. When a user viewed that profile, they would have the payload planted on their page. Within just 20 hours[3] of its October 4, 2005 release, over one million users had run the payload,[4] making Samy one of the fastest spreading viruses of all time.[5]

Execution of the payload resulted in a "friend request" automatically being made to the author of the virus and in messages containing the payload being left on the profiles of the friends of the victim. MySpace has secured their site against the vulnerability that allowed the attack; however, the phrase "Samy is my hero" remains in thousands of MySpace profiles.[6]

References

External links