[Techtalk] MicroSuck in web cache

Liz Young liz at kandew.net
Thu Mar 28 09:50:53 EST 2002


Hi linuxchix,

My workstation was compromised yesterday by something placed in my web cache 
--   ~/.kde2/share/apps/kio_http/cache/a ...b ....c, etc..

At every website viewed from Konqueror, any page with the word Microsoft was 
replaced with MicroSuck.

I didn't know the problem was in the cache until after I removed it (rm -rf 
/.kde2/share/apps/kio_http/cache/*), so I can't do any forensics but I'd sure 
like to know what is was.

Sidenote:  there's a bug in Konqi -- the Clear Cache button 
(Settings>Configure>Proxies & Cache>Cache) doesn't clear the cache, it just 
returns a "Cache Cleared!" dialog.

I vaguely remember something about this microsuck thing, but can't come up 
with any info.  Is it a javascript?  Anyone heard of it?  Thanks in advance,

-Liz

SuSE 7.3/KDE 2.2.2



More information about the Techtalk mailing list