Wikipedia used to spread malicious code

[pnorman]

A Wikipedia page has been used by hackers in an attempt to spread malicious code.

The entry for the MSBlast worm in the German version of the popular online encyclopedia was altered to include false information about a new version of the Lovesan/MSBlast worm, with links to a supposed fix, according to Sophos. The fix was actually a piece of malicious code, the antivirus vendor said in a notice published Friday.

It's not clear how long the vandalized page was live, but the editors of Wikipedia.de moved quickly to delete the links once they were discovered.

However, because Wikipedia archives old versions of articles, the hackers were still able to send links to the archived entry through a mass-mailed e-mail. This e-mail purported to be from Wikipedia, and directed German users to the fraudulent Lovesan/MSBlast entry. Because the e-mails linked to a legitimate Web site, they were able to bypass some antispam solutions, Sophos reported on Friday.
.
.
.

http://news.zdnet.com/2100-1009_22-6132733.html?tag=nl.e550
pnorman

[sakabatou]

1. Never get patches from a link to a "vendor"

Always, always go to a certified site.