Nefarious user took advantage of the social networking site's URL organization to get access to user information
On Friday, Web analysis firm Netcraft Ltd. reported that a MySpace user was e-mailing potential victims inviting them to visit a fraudulent log-in page, where they were asked to enter their e-mail address and password. That information was then sent to a server located in France, according to Netcraft.
The attack, which was shut down by MySpace around 10 a.m. Pacific on Friday, took advantage of the way MySpace organizes URLs (Uniform Resource Locators) in order to give the fake log-in page a believable Web address, something that could confuse even security-conscious users, according to Netcraft analyst Rich Miller.