---
id: 4240
title: "How I Built An XSS Worm On Atmail"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/how-i-built-an-xss-worm-on-atmail"
published_at: "2017-06-23T00:00:00Z"
tags: ["xss", "vulnerability", "worm", "webmail", "atmail"]
phying_url: "https://phying.com/item/4240"
lang: en
---

# How I Built An XSS Worm On Atmail

## Summary

Building a self-propagating XSS worm against the Atmail webmail front end: crafted image tags evade filters to steal contacts, send emails and expose inboxes, echoing the MySpace and TweetDeck worms.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2017-06-23T00:00:00Z
- **Original:** https://bishopfox.com/blog/how-i-built-an-xss-worm-on-atmail
- **Phying News:** https://phying.com/item/4240