QUOTE
We've seen another attack using an insecure feature of QuickTime called HREF Tracks...it will try to download and execute...Trojan-Downloader:JS/Spacestalk.A...The said script collects MySpace information from the user that includes Username, FriendID, MySpace Display Name, and other logins of the user,...

f-secure.com/weblog