Security Experts Expose Costly Vulnerability in Second Life

Second Life users need to be cautious with Quicktime embedded videos in the game as it may be used to pick your pocket of Linden Dollars.

Charles Miller and Dino Dai Zovi, of Independent Security Evaluators, have found that by using a flaw in Quicktime, they can not only pick the pocket of any user within 100 virtual feet of the player, they can take complete control of the avatar. Once the account has been taken over, the hackers can then use that avatar to go to other lands, embed their virus loaded video, and it will continue to spread from land to land.

Since Linden Dollars can be converted to real money (L$250 = $1 USD approximately), someone using this hack could turn this in to quite the money making venture. With more and more real life commerce happening inside of Second Life, and some people making their livings via the game, people need to be as careful as possible.
read more here....