A worm is hijacking Tumblr blogs and posting spam, said to affect thousands of accounts (Update: Fixed)

Reports are coming in of a Tumblr worm spreading on the microblogging platform. Among the victims are The Verge‘s and CNET‘s Tumblrs, which include a message about a ‘GNAA video’ post. It’s advisable for users to avoid visiting Tumblr blogs directly until the issue is resolved, and definitely not to click on any GNAA posts with a video inside nor accompanying links.

“There is a viral post circulating on Tumblr which begins “Dearest ‘Tumblr’ users”,” a Tumblr spokesperson said in a statement. “If you have viewed this post, please log out of all browsers that may be using Tumblr immediately. Our engineers are working to resolve the issue as swiftly as possible. Thank you.”

The affected Tumblr pages include lots of spam as well as the following alert:

So, what is the GNAA? The acronym stands for the Gay N***** Association of America, an anti-blogging Internet trolling organization. One of the member’s Twitter accounts points to the bronies Tumblr tag as a way to keep track of all the blogs being affected. The latest count is over 8,600 uniques. Gawker has interviewed the group’s spokesperson, who said Tumblr was apparently aware of the vulnerability for weeks.

In fact, Twitter users are already warning each other of the worm; here’s public service announcement from Matthew Keys, Reuters’ Deputy Social Media Editor:

[PSA] There’s a worm spreading on Tumblr, use dashboard, avoid visiting individual Tumblr blogs.

— Matthew Keys (@TheMatthewKeys) December 3, 2012

Tumblr has also chimed in, with a rather redundant tweet:

We are aware that there is a viral post circulating on Tumblr. We are working to resolve the issue as swiftly as possible.Thank you.

— Tumblr (@tumblr) December 3, 2012

We have contacted Tumblr about this issue. We will update this article if we hear back.

Update at 1:25PM EST: Tumblr says it has fixed the problem.

Tumblr engineers have resolved the issue of the viral post attack that affected a few thousand Tumblr blogs. Thanks for your patience.

— Tumblr (@tumblr) December 3, 2012

Image credit: Tess_Marie/Flickr