Malware writers have set up shop in one of the world's most heavily trafficked domains, myspace.com. There, they employ social engineering and cross-site scripting [XSS] attacks to exploit known vulnerabilities.