Fake YouTube videos being used to spread malware

If you received an email from someone you do not know with a link to a YouTube video, don’t click the link. It might be a download link for a trojan or worm that can harm your PC or trigger a case of identity theft.

Today I received an email from a certain natblaze@jwmolding.com inviting me to watch a particular YouTube video. The supposed video, however, is not on YouTube but on a different site — http://89.179.33.84/ — and visiting it automatically prompts you to download an .exe file. (WARNING: Do not visit the site if you do not want your PC to be compromised.)

The .exe file is most probably a malicious software (malware) such as trojan or worm.

A Trojan is a program that installs backdoor programs in a person’s computer that allows unauthorized remote access to the victim’s machine. A Worm, on the other hand, is a self-replicating program that sends copies of itself to other computer terminals without the need for any user intervention. These malicious softwares are normally used to steal passwords of the victim which are used for identity theft.

Here’s the email I received containing the link to the malicious software download page.

From: “natblaze@jwmolding.com” <natblaze@jwmolding.com>
Date: Aug 25, 2007 11:31 PM
Subject: OMG, what are you thinking

If your dad see this video you made, he is gonna kill you. this is the link to it. http://www.youtube.com/watch?v=jItjx4D4KKP

Clicking the <http://www.youtube.com/watch?v=jItjx4D4KKP> link opens a new site, <http://89.179.33.84/>, which automatically prompts the download of the malware named video.exe.

Next time you receive an email with a YouTube video link, don’t immediately click on it. Make sure the email came from a trusted source; otherwise, simply delete the email or mark and report it as spam or phishing message to your email company.

Topic keywords for this post:

• www youtube com
• youtube com