Social networking sites like MySpace and YouTube contribute to cyberspace identity theft.

News flash: Greater risk for cyberspace identity theft when visiting social networking and video uploading websites. Earlier this month at the annual Black Hat and Defcon Hacker Conference in Las Vegas, it was revealed that hugely popular websites such as MySpace.com and YouTube.com are an abundant source of viruses, spyware and other malicious programs.

Ok, this is not exactly breaking news. But if you didn't know, now you do.

However, what is news is the supposed findings that MySpace contains vulnerabilities (holes) that allow for account holder's personal and sensitive information to be captured and possibly exploited or used to commit crimes - including identity theft - by way of stealing a computer's "cookie" information. MySpace did not immediately comment on this issue, but let's hope they get a patch out right away - if in fact the "findings" are true.

Cyberspace identity theft and other crimes continue with the streaming of songs and videos at both MySpace and YouTube and other similar sites where users upload tainted content. Malware gets purposely injected into music and video files and the infection occurs on the user's machine when the unsuspecting play or view them. Once on a user's computer, the code can then be used, among other things, to spy on the user or force the user's computer into a life of crime by enlisting it into a botnet of criminal networks - all without the computer owner's knowledge or consent.

With all the viral sharing, viewing and playing of user generated content, this threat is only going to increase. But since there is no way any of us can give up watching the 'cutest kitten ever' videos, what's a MySpace user or YouTube viewer to do? First and foremost, keep your security software up-to-date! Second, be cautious of clicking on suspicious links - those received by "friends" you don't know (and even the ones you do!) when on MySpace, YouTube or other social sites. And do like you do in real life: consider the source and don't blindly trust those you don't know.

Leave Cyberspace Identity Theft and return to ITPME's main Blog page.