Social Media  How StalkDaily Opened a Gaping Hole in Twitter
UPDATE 2: a second Twitter attack, named "mikeyy" occurred on
Sunday morning. See the article mikeyy: Another Twitter Worm on
the Loose for the most recent coverage.  UPDATE: Minutes ago,
Twitter confirmed that they have successfully closed the hole
that allowed this worm to spread. You're safe to visit Twitter
profiles again :) The below still stands as the most complete
explanation of how the attack was conducted: please do give it a
read!  Today one of our favorite sites, Twitter, was hit with a
particularly nasty exploit: one that could infect users simply
by visiting a friend's profile on  The nature of the attack was
far more serious than previous exploits, since there was no need
to click a link to get infected. We're hopeful, however, that
Twitter will move quickly to prevent this form of cross site
scripting (XSS) attack. In the meantime, we've looked into how
the attack was executed, and how you can avoid it.  What
Happened: Our Best Gue