MySpace users are being tricked into installing adware on their PCs through embedded video links that appear in "friend" profiles, according to several blog reports today. Clicking on the "play" button in certain videos may mean you've just consented to install Zango's adware:
A serendipitous search by Vitalsecurity.org through the profiles on MySpace for adware companies revealed profiles belonging to Zango. The Zango profiles were crafted to push Zango's products to visitors.
One profile pushes a toolbar and programs for protecting "kids from predators," noted Vitalsecurity. The other profile launches what looks like a typical video player seen on many MySpace profiles when visited.
For the careless user who does not read the fine print in the popup video player, clicking the big red Play Now button places the Zango Search Assistant and its Toolbar on the user's system. It's a twist on the typical enticement to download software the user may not want if he actually knew what was being downloaded.
Link to Security Pro news story, and here's the original post on vitalsecurity.org.