In December 2007, hundreds of thousands of users' accounts were affected, using XSS vulnerability and a worm.
On June 19, 2006, FaceTime Security Labs' security researchers Christopher Boyd and Wayne Porter discovered a worm, dubbed MW.Orc [REF].