Update: Looks like we’re all clear — all links have been removed.
Well, this is certainly a busy time for the porn/malware bad guys. The same folks who apparently spammed Sourceforce with porn and mawlare redirects are now doing it on, of all places, Flickr.
Instead of posting photos, however, they’re posting links, like this:
The links point to a URL shortener (for example, hxxp://1k.pl/ flickr), which then redirects through an interim page to something like this:
(We’ve removed the images, of course.)
Clicking on one of those links will give you malware — not a pleasant thing.
A list of the malicious URLs we were able to find are here.
Alex Eckelberry
(Hat tip to Patrick Jordan)