"ViddyHo" attack

There's a deady worm passing through gChat; I was attacked this afternoon! I survived by not doing anything. Don't give them your gmail information!

A phishing attack is quickly spreading through instant-messaging sessions, including Google Chat, and directing victims to a Web site called “ViddyHo.”


A link, shortened through TinyURL, directs message recipients to a ViddyHo login page. That page instructs them to enter their Google account information, which is then used to break into the victim’s account and send the link to other users in the victim’s address book or buddy list.






That’s particularly risky in the case of Google, he said, since a spammer with access to a victim’s GChat account might use it to tap his or her Gmail, Blogger or other Google accounts.

UPDATE: Kevin Gilbertson, TinyURL’s founder, said that the site is now blocking any TinyURLs from being created that point to the site.

Readers, have you been spammed by these phishing attacks yet? Have you seen them anywhere else?

via http://blogs.wsj.com/digits/2009/02/24/viddyho-attack-spreads-through-chat-sessions/