In case you haven't already seen a post about this...
Wednesday, September 23rd, 2009 07:24![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
sofiavioletLJ was hit by some malicious flash.
People who have analyzed the malicious code say that it just harvests your email address for spam purposes and replicates itself, but you may wish to expire all your LJ sessions to be safe.
Please check the most recent few entries on your LJ. The exploit replicates itself by inserting code into a recent entry by each user who views it while logged in, making the affected post(s) public if they weren't already.
If you find an infected post, you'll want to edit it to:
* restore its security setting (infected posts are changed to public),
* restore its metadata (the exploit deletes current music/mood/location and uses the default icon),
* remove the malicious code.
People who have analyzed the malicious code say that it just harvests your email address for spam purposes and replicates itself, but you may wish to expire all your LJ sessions to be safe.
Please check the most recent few entries on your LJ. The exploit replicates itself by inserting code into a recent entry by each user who views it while logged in, making the affected post(s) public if they weren't already.
If you find an infected post, you'll want to edit it to:
* restore its security setting (infected posts are changed to public),
* restore its metadata (the exploit deletes current music/mood/location and uses the default icon),
* remove the malicious code.
