Orkut is recently hit by a an XSS attack “bom sabado”. Attack is similar to the previous XSS attack.  It seems that like the provious virus, this new virus is also developed by brazilians. “bom sabado” is a Portuguese word means ‘Good Saturday’.

Experts are saying that do not login to orkut until the issue is resolved. If you try to view anybody’s scrapbook, then the visus script executes automatically and it will send scraps to everyone from your account.

Recomendations:

• Switch to the “older version” of Orkut.
• Log out of Orkut.
• Clean your browser’s cache and cookies.
• Log in and change your password and security question.

Get updates on this at Google’s Orkut Help Forum.