Myspace Hack spreading like wildfire: SPAIRLKAIFS
Follow us on Twitter: Twitter.com/chaseathompson or Twitter.com/usgeeks
Well, well. Somebody has managed to hack Myspace.com with a flash based redirect that exploits what is apparently a gaping wide hole in the Myspace code. If you are signed into Myspace, and you go to a friends page, and then find yourself redirected to a blog post containing a diatribe about how the United States government is behind the 9/11 attacks, then your account has been hacked, and everyone who visits your page will be infected!! Yes, it’s true, at least for now - everybody who visits an infected profile while signed into their Myspace account will have their page hijacked! Keep scrolling past the video for my information on Hacking Myspace.
The solution is rather simple: Go to your home page, and click on edit profile, remove the line below (and only the line below) from your About Me section: (I added some “f’s” to the code so it won’t work here)
fembed ffallowscriptaccess=”fnever” src=
“fhttp://i105.photobucket.com
/albums/mff225/yrkblack/redirecft.swf”
BY SPAIRLKAIFS
It’s possible that the line above will be the only line you see - in that case, remove it all, and be sad if you had a custom template installed, because chances are you will have to re-install it.
If you see nothing in your About Me section, chances are you have a non-Myspace custom template. You will need to click on the link that says “Safe edit mode” in the top right corner of the edit screen. You should be able to edit your About Me section at that point. If, for some reason, when you click that button you are taken to a screen that deals with your Myspace groups and says something like, “you have no groups to moderate”, then you will need to change the address in the Url box (at the top of your browser). It probably ends with this: fuseaction=groups.safemode, and you will need to change it to read: fuseaction=profile.safemode and then hit enter. From there, you should be able to remove the offending line of code from your account. Best not to do too much viewing of other people’s accounts until Myspace fixes this problem. Please comment here if this has helped you or if it doesn’t work, and feel free to browse the rest of our site!
-Chase
July 16th, 2006 at 3:34 pm
i checked this out in my profile, and when i got to the page and looked for the line of code, the only times i saw it were before 2 countdown things i have from blingyblob, and it doesn’t say anything about redirecting. What does this mean for me?
Aaron myspace.com/djbigman
July 16th, 2006 at 3:43 pm
Thanks for the interesting post.
July 16th, 2006 at 3:49 pm
Don’t use IE. Firefox FTW.
July 16th, 2006 at 5:02 pm
Facebook FTW
July 16th, 2006 at 8:07 pm
http://members.cox.net
/djmichaelangelo6/myspace1.jpg
http://members.cox.net/
djmichaelangelo6/myspace2.jpg
These are screen shots of the FULL-SCREEN error message I get sometimes while visited MySpace or Tripod websites. They are this spam-looking, browser-hijack attempt kind of an error message that takes over my whole screen (even the taskbar on the bottom) and won’t let me click “no” - it’s like an endless loop of error messages. The only way to get out of it is to ctrl+alt+delete and restart Internet Explorer. I think it might be tied in with the Bloodhound virus (which was quarantined and removed from my computer) but the problem still occurs, with full-screen ads that pop up like wildfire. I’m smart enough to know NOT to click on anything suspicious or open file unknown file attachments, etc - so I know it can’t be a problem with my computer. Plus I run Norton, Adaware, and another spyware removal tool regularly. Another weird problem I notice is when going to Flash-intensive sites like http://www.southerncomfort.com, it makes my Windows Media Player (or MusicMatch, or any other program I use to play mp3’s) skip and glitch up - sounds like a broken record. I’m just about ready to throw my computer out the window. Anyone have any ideas?
July 17th, 2006 at 12:22 am
yeah it happened to me. there wasn’t much on my page anyways, but it sucks when you dont visit myspace for a couple of days and come back to realize all the people that wanted to view your profile got redirected to some bullsh*t.
dugee81
July 17th, 2006 at 10:35 am
At least you get redirected to something useful.
July 17th, 2006 at 11:49 am
That’s not the issue.. but i agree.. the topic is ok
July 18th, 2006 at 7:45 am
To MIKE who had that endless loop of full screen pop-ups - I got that too and contacted MySpace support on numerous occasions - which in order to do you have to go through a serise of ‘yes or no’ questions wherein they try to give you an automated help answer. Three days after my most recent attempt I was still getting automated answers to problems completly unrelated to what was actually happening. I replied using some very adult language and the problem seems to have quieted down - but I wonder if anyone is still having this problem?
BTW, I looked all over ALL my code in myspace and never found this script line - possibly because I inputted all my own HTML?
July 20th, 2006 at 11:46 am
What sites exactly were the profiles being redirected to?
It’s sad that “unpleasant” information is forced onto so many people unwillingly, but I do think there is much more behind 9/11 that most people realize. In that token I hope this doesn’t give otherwise good alternative research into 9/11 a bad name just because it’s in the form of “spam” or “hacks”. There are important things to look into and some people have been risking their lives to get truth out.
August 1st, 2006 at 3:17 pm
I can’t seem to edit my profile at all. Whether I do it the regular way, or choose “safe mode,” I’m taken to a completely grey page with no tabs and no options for editing.
August 1st, 2006 at 5:11 pm
I’m having the same problem as Mike Justice? Anyone know how to fix this to be able to edit a profile again?
August 8th, 2006 at 10:29 am
but what if you are already hacked into? I tried to get in my page but it just goes to the sign up screen. what do i do. i already got my password back in my email…
August 8th, 2006 at 3:22 pm
If you update Macromedia flash you should be safe. To clarify: The way the hack works is; Flash movies allow you to embed redirect (Metarefresh tags are disabled on Myspace) information, so what happens is that you are instantly sent to a new page when the movie loads. The more dangerous varient of this hack, is the same as above, but instead of a random page, you are directed to a page which is a virtual copy of the mspace Re-Login page. The only difference, is that the login forms do not send the information to the myspace server, they send it to a remote server using a .php out file.
This allows someone to gain you login information. Ergo they can also gain your identity location, and edit your page. This also a reason that you should use different passwords for different sites (email, myspace, private websites). Finally the Flash movie embeds a cookie, that prevents it from running again, which lowers the odds that the victim will wise up and change passwords.
August 8th, 2006 at 3:27 pm
(Addition to above post)
if you want more information about this contact me at. I will not give the actual code. Besides its 2 lines in Flash, and 5 or so for the server side .php script so if you have any clue then you can figure it out your self yournamehere485@gmail.com
August 26th, 2006 at 11:26 pm
Nice, another MySpace hack/worm. When will they learn? You would think with their budget they would be able to afford a damn security audit.
—
My Hot or Not
September 30th, 2006 at 6:22 pm
wel i have sumthing wrong with my myspace that it posts bullitens that i didnt even post up sayin like omg u could win this free 500 dollar gift certifacate to ur favorite store and its gettin really annoying because my friends think its me any way u could help me out? if u could just leave me a message on my myspace http://www.myspace.com/vivaportugal
thanx
October 16th, 2006 at 1:54 pm
yeah.. these bullitens keep showing up.. like look at my webcam and stuff.. and i dont know how to get rid of it.. everyone thinks its me posting them!
October 23rd, 2006 at 7:32 am
why do u join such shitty sites? i hacked thousands of hi5 profiles with a different hack.
October 23rd, 2006 at 7:33 am
why do u join such shitty sites? i hacked thousands of hi5 profiles with a different hack.
October 30th, 2006 at 7:46 pm
dude. someone give me a good hack. I need one. BADLY.
December 4th, 2006 at 3:39 pm
I can’t get that ActiveX off my page and I tried everything, and nothing, please help
December 12th, 2006 at 4:12 pm
i tried to login to my myspace profile and it wont let me i think my profile has been hacked can you help me delete my profile because i would delete it but how can i do that when i cant even access my own profile to delete it thanks
January 31st, 2007 at 5:22 pm
I added a network but when I did my entire background disappeared and my whole page went to the middle. I went back to my networking section to delete the network but the edit/delete button has been taken away. I went ahead and deleted everything out of my profile because it made it so long going down the entire page. However, I went back in and put in my layout code in the About Me section but it wouldn’t work there so I put it in the Interest section and it worked. If I type things or add pictures in the About Me section it is okay but everything stays in a long line going down the page and it will not change no matter what layout I put on my page. My long network box and blog box and About Me section that normally go on the right side of the page aren’t there. I can’t really do anything with the profile now. Does this mean it’s been hacked? I don’t want to delete the account and start over. Is there anything I can do? Thanks!
January 31st, 2007 at 5:23 pm
I added a network but when I did my entire background disappeared and my whole page went to the middle. I went back to my networking section to delete the network but the edit/delete button has been taken away. I went ahead and deleted everything out of my profile because it made it so long going down the entire page. However, I went back in and put in my layout code in the About Me section but it wouldn’t work there so I put it in the Interest section and it worked. If I type things or add pictures in the About Me section it is okay but everything stays in a long line going down the page and it will not change no matter what layout I put on my page. My long network box and blog box and About Me section that normally go on the right side of the page aren’t there. I can’t really do anything with the profile now. Does this mean it’s been hacked? I don’t want to delete the account and start over. Is there anything I can do? Thanks!
February 3rd, 2007 at 7:30 am
what do i do if i cant log in at all and it just redirects the page.
e-mail me please.
gaspar_lover50@hotmail.com
February 4th, 2007 at 10:36 am
if the code you have is suppose to help, how do i put it on my page
when it wont let me go to my home page and sometimes not even myspace?
it keep saying the page needs to be redirected, but my page was fine 3 days ago.
whys this?
February 5th, 2007 at 10:51 pm
Yeah, it’s happening to me to, not the getting to myspace and redirecting but the not being able to get to myspace at all.
It says “has detected that the server is redirecting the request for this address in a way that will never complete.” and such.
but it was fine less than a week ago.
Is this part of the virus or am I doing something wrong here?
email me: cap_da_man@hotmail.com if you can help or if you’re experiencing the same problems
February 15th, 2007 at 9:50 pm
um ser this does not work for me i go to edit profile and it just takes me to my home page can u help me pls my EMAILE IS zachberg1@gmail.com
February 22nd, 2007 at 1:41 pm
I cannot edit my networking can someone please help me!!
May 10th, 2007 at 11:05 pm
i’m in a band and have a music page. i deleted all movies and flash objects. i can’t find that photobucket tag anywhere in my html code. wtf..f myspace
May 11th, 2007 at 1:41 am
I have a music account that has been hit by this Flying Spaghetti thing…my problem is a lil different from what ive read here….i have the black box on the top of my profile…i have cleared my bio sections etc…i also have sections that are only supposed to be on personel myspace pages…i have ABOUT ME instead od A BIO…i have a WHO I”D LIKE TO MEET, BOOKS etc SECTIONS…none of witch come with the music/band accounts….my juxbox/player is gone…basically when you go to my page….it looks like a regular myspace not a band page…plus my gender changed it says im 103 years old etc….but my home page is fine…what do i so..any suggestions ANYBODY?????
May 11th, 2007 at 1:42 am
I have a music account that has been hit by this Flying Spaghetti thing…my problem is a lil different from what ive read here….i have the black box on the top of my profile…i have cleared my bio sections etc…i also have sections that are only supposed to be on personel myspace pages…i have ABOUT ME instead od A BIO…i have a WHO I”D LIKE TO MEET, BOOKS etc SECTIONS…none of witch come with the music/band accounts….my juxbox/player is gone…basically when you go to my page….it looks like a regular myspace not a band page…plus my gender changed it says im 103 years old etc….but my home page is fine…what do i so..any suggestions ANYBODY?????
May 30th, 2007 at 11:49 am
I am having the same problem as another user. There is something in my networking section that won’t let me edit or delete it. I added a tracker (I know, shame on me) and went to delete the code Monday and now my whole page is outta whack! I got almost all of the code out, except for what it tells you to add in the networking portion. The button to edit/delete is gone. My email is Crissi2479@yahoo.com if somebody out there can help!
Thanks in advance!
June 26th, 2007 at 3:50 am
If you are seeing a bunch of bulletins that are attributed to you but you did not write, go to your friends list and click on the “Edit Friends” button.
From there, go through all your friends and if you happen to stumble upon one that says “This profile no longer exsists” delete it because obviously someone has hacked onto your profile.
Once you do that, make sure to change your password immediately, with at least two number in the MIDDLE of your password, not just on the end, and not just on the beginning.
This should help.
June 26th, 2007 at 10:01 pm
I got a email from Myspace saying my profile had been phished. I changed my password but I can’t get onto my home page to change anything. I can’t get to my home page so I can’t get to safe mode and one time i could but could not see any code and so I don’t know what to do. How can i restore my home page?
Please email me at mowza16@yahoo.com if you can help at all with this
July 5th, 2007 at 3:02 pm
i dnt understand the line below wtf is the line below??? please help me! jesterschick7@yahoo.com
July 5th, 2007 at 3:19 pm
i dont get it wen u say the line below what line below? please help!jesterschick7@yahoo.com
July 17th, 2007 at 8:59 am
how do u hack into a profile
July 17th, 2007 at 9:05 am
how do u hack into somebodys profile,i wanna know
August 13th, 2007 at 2:06 pm
“yeah.. these bullitens keep showing up.. like look at my webcam and stuff.. and i dont know how to get rid of it.. everyone thinks its me posting them!” I’ve had that happen to my profiles. The only way to fix it, is to check your entire edit profile section for any code that you didn’t put there. To be on the safe side, everytime you edit your profile, adding new HTML or other things to it, copy & paste all of the new coding into a Notepad file. That way, if you know your profile has been hacked, you can delete all of the coding and copy & paste all of the coding from the Notepad file into the appropriate sections. I’ve had to do that several times, it helps when your profile gets deleted as well, as it cuts down on the time it takes to recreate your profile. lol. After editting your profile, change your email address on file and your password, go into the email account that you did have on file and approve the change. Done, and it’s yours again.
lol.
August 29th, 2007 at 4:17 pm
i cant find the safe mode anywhere on my myspace
October 8th, 2007 at 4:20 pm
I lost all my friends just now when I logged in on myspace, someone there who knows how to get them back?
thanks
October 10th, 2007 at 10:48 am
i cant edit my account. whenever i sign in i dont go to my home page i go to an all white myspace page. i can check my mail and view blogs but there is no link to go to my profile, edit my profile and there is no place for my picture. someone please help me because i want to edit my page.
October 23rd, 2007 at 12:12 pm
My own profile was finally hacked. After someone responded to a bulletin on my account (the, “I finally did it! Check the pic” type), I posted an apology, and searched for spyware on my PC.
None.
I use Firefox, the most questionable sites I visit are webcomics, and the above code was not anywhere in my profile. I think this goes deeper than a few hackers. I begin to wonder if MySpace itself might not be doing this for commercial purposes.
October 29th, 2007 at 10:36 pm
I thought I would share with everyone the website that I used to hack my GF myspace. They had her information in less than 3 hours.
http://atxseo.com
November 2nd, 2007 at 11:45 am
I HAVE THE SAME PROBLEM- THEY GET ME EVERY NIGHT!!!!!
November 18th, 2007 at 11:53 am
Hey guys,
i’ve used http://hackityourself.com and it worked awesome.
Try it!
December 19th, 2007 at 11:30 am
HEY GUYS I JUST WANTED TO LET EVERYONE KNOW THAT I HAVE USED ATX TO GET MY BF MYSPACE PASSWORD AND THEY SENT IT TO ME WITHIN 2 HOURS. THOUGHT I WOULD SHARE.
HTTP://MYSPACEHACKING.NET
December 22nd, 2007 at 3:14 am
Don’t even try to use myspacehacking.net, ATX, or any other service related with that company. Not only does it NOT work, AFTER you pay for it they explain that your 100% money back guarntee is null and void and even go so far to threaten to email the person whose account you are trying to hack to tell them what you are doing if you try to pursue the money back guarntee.
January 19th, 2008 at 2:11 am
[...] Myspace Hack [...]
February 15th, 2008 at 12:13 pm
yo how do i can get on myspace in school
March 12th, 2008 at 8:02 pm
ATX,none of things work.
all scam sites
March 29th, 2008 at 5:27 am
i cant find my password to my myspace.
April 27th, 2008 at 3:24 pm
Atx password site is a major Scam…
April 30th, 2008 at 6:51 pm
Does toue explanation (about MySpace hacking) mean the Photobucket program is part of the problem? Everyone at MS kept insisting I needed to D/L PB to enable graphics. Even MS promoted it. I went so far as registering with PB but did not D/L their program. But I did visit a MS page that read just as you’ve described (”sexy singles” context). It was very odd given the page nature. So am I now infected too, simply by viewing that MS page, myself only having a basic MS page set-up (no graphics)?
May 5th, 2008 at 8:12 pm
Of course the atxseo.com, hackmyspace.net, myspacehacking.net websites are a SCAM. They stole me $50 for nothing, they DID NOT help me getting my info about my myspace account. they are CHEATERS, thieves, phishers.
July 16th, 2008 at 12:49 am
Anyone know how to post in a Private Group after getting kicked out? I figured out how to view the threads but not how to post.
If you know IM on Yahoo: tflorczakjr or AIM: tjfats
August 22nd, 2008 at 4:30 pm
You guys have problems just simply ask your spouse for their password don’t go hire someone to complete this task for you it is not the right way of doing things.
August 28th, 2008 at 11:49 pm
I really need help on logging in to my music page on myspace…it was workin a few minutes ago an now it won’t let me in…Can u please help me log back in to my page please!!!!
September 27th, 2008 at 12:39 am
I already know that myspace has two security features in: a script that embeds itself in all forms and alerts you if you submit information into that form, and the external link warning page. However, it may be tricky to get into Flash movies that run in add-ons. If allowScriptAccess is set to “never”, you can’t get into it. However, the solution i use is IE7Pro at http://www.ie7pro.com/ , it has a Flash blocker which blocks all flash until you click on it. It also has an ad blocker, so you can get rid of the advertisements, too. If you use the Flash blocker, your chances of getting hijacked by an embedded flash movie are much narrower.
October 5th, 2008 at 3:40 am
idk im kinda confused on how this tells u to HACK A MYSPACE ACCOUNT. im trying to hack my old account because some1 hacked it and changed my password and i was wondering if i can do the same. ive looked everywhere and havent found one simple thing on how to do that. any help?