A worm that exploits a security hole in Apple's QuickTime caused havoc on MySpace over the weekend, embedding itself on users' profiles and adding links to phishing sites.
The worm affects users who view a QuickTime video that the virus has attached itself to, if the video is viewed via Firefox or Internet Explorer, CNET reports. MySpace has contacted Apple's engineers to request they immediately resolve the problem.
When a MySpace user views the infected video, the worm, dubbed QuickSpace by F-Secure, attaches itself to the user's profile and replaces links on the profile with links to phishing sites. MySpace claims that a large number of users were affected, and that it has both removed the phishing links and blocked their URLs.
Apple spokeswoman Lynn Fox says the company has come up with a temporary fix that disables QuickTime in Internet Explorer and is "working on a broader solution."
The links that were added to users' profiles were designed to send the user to a site that resembles a MySpace login screen, which would allow the hackers to collect information about the user.