Fake YouTube videos being used to spread malware
August 26, 2007
If you received an email from someone you do not know with a link to a YouTube video, don’t click the link. It might be a download link for a trojan or worm that can harm your PC or trigger a case of identity theft.
Today I received an email from a certain firstname.lastname@example.org inviting me to watch a particular YouTube video. The supposed video, however, is not on YouTube but on a different site — http://184.108.40.206/ — and visiting it automatically prompts you to download an .exe file. (WARNING: Do not visit the site if you do not want your PC to be compromised.)
The .exe file is most probably a malicious software (malware) such as trojan or worm.
A Trojan is a program that installs backdoor programs in a person’s computer that allows unauthorized remote access to the victim’s machine. A Worm, on the other hand, is a self-replicating program that sends copies of itself to other computer terminals without the need for any user intervention. These malicious softwares are normally used to steal passwords of the victim which are used for identity theft.
Here’s the email I received containing the link to the malicious software download page.
From: “email@example.com” <firstname.lastname@example.org>
Date: Aug 25, 2007 11:31 PM
Subject: OMG, what are you thinking
If your dad see this video you made, he is gonna kill you. this is the link to it. http://www.youtube.com/watch?v=jItjx4D4KKP
Clicking the <http://www.youtube.com/watch?v=jItjx4D4KKP> link opens a new site, <http://220.127.116.11/>, which automatically prompts the download of the malware named video.exe.
Next time you receive an email with a YouTube video link, don’t immediately click on it. Make sure the email came from a trusted source; otherwise, simply delete the email or mark and report it as spam or phishing message to your email company.
Click for more interesting, useful and related posts:
- www youtube com
- youtube com