NEWS FROM THE LAB - Sunday, April 19, 2009

Mikey and the Mysterious Treqz. Posted by Mikko @ 10:31 GMT

One more post on Twitter worms.

What's up with Mikey Mooney? He wrote a series of Twitter worms, got hired, got hacked (hey, nice passwords, Mikeyy) and released yet another worm last night.

This one did extensive modifications to infected profiles; changing the name and bio to "Mikeyy" and the title of the profile to "Mikey and the Mysterious Treqz."

Mikey and the Mysterious Treqz

This variant downloaded additional scripts from runebash.net/xss.js (careful, it's still up).

The messages it sent were more philosophical in nature:
Be nice to your kids. They'll choose your nursing home. Womp. mikeyy.
If you are born ugly blame your parents, if you died ugly blame your doctor. Womp. mikeyy.
Every man should marry. After all, happiness is not the only thing in life. Womp. mikeyy.
Age is a very high price to pay for maturity. Womp. mikeyy.
Ninety-nine percent of all lawyers give the rest a bad name. Womp. mikeyy.
If your father is a poor man, it is your fate, but if your father-in-law is a poor man, it's your stupidity. Womp. mikeyy.
Money is not the only thing, it's everything. Womp. mikeyy.
Success is a relative term. It brings so many relatives. Womp. mikeyy.
'Your future depends on your dreams', So go to sleep. Womp. mikeyy.
God made relatives; Thank God we can choose our friends.Womp. mikeyy.
'Work fascinates me' I can look at it for hours ! Womp. mikeyy.
I have enough money to last me the rest of my life. (unless I buy something) Womp. mikeyy.
RT!! @spam Watch out for the Mikeyy worm (bit.ly link)
Mikeyy worm is back!!! Click here to remove it: (bit.ly link)

How many users got infected? We can't tell the total count. However, Mikeyy seeded the infection via three new Twitter user accounts he had created and we can see how many clicks they got:

Account 54321ana: 4,833 clicks
Account er1kaaa: 4,895 clicks
Account chicostickgirl: 8,066 clicks

The only thing we haven't seen yet is that a really popular Tweeter with tons of followers would get infected (think Britney Spears or Lance Armstrong).