A hacking group has unleashed a worm which defaced thousands of Tumblr websites.
The infection spread to some 8000 pages via a vulnerability in the blogging platform and possibly though a suspected Java hole.
The group known as GNAA behind the attack said they warned Tumblr of the vulnerability but it did not respond. No further details on the hole were revealed and the security hole has been since fixed.
USA Today and Reuters were among the Tumblr pages struck by the worm.
The Daily Dot which was a victim of the attacks said the worm was buried in a link within the defacement which when clicked allowed the post to propagate to the victim's Tumblr blog.
The worm did not appear to inflict any other harm than to spread the inflammatory spam message. Users' accounts were not compromised.
