NOW READ THIS
("Security Advisory")



Submitted by: Bill Hickey
NCVA Listmaster

NRT-0632 Criminals use fake YouTube pages to spread malwar:


A new compromise tactic has been detected recently in which criminals create fake YouTube pages ‑ exact replicas of the real Web site ‑ to promote malicious software, according to an online IT news report. Users who follow an e‑mail that directs them to one of the pages receive an error message claiming the video will not play without installing new software. The error message includes a link to a malicious program, which delivers a virus. Once the computer is infected, the hackers are able to silently redirect the victims to a real YouTube page to watch videos they were hoping to see, thereby hiding the crime. "It's spot‑on accurate, and that is scary," said Jamz Yaneza of security software company Trend Micro. "If I were watching YouTube videos all day I would probably click on this one." The attack still contains telltale warning signs. For example, the Web browser does not show the real YouTube's Internet address; and to even see the malicious page, users must first follow a link that is sent to them.

(apnews.myway.com, 08OCT08)


Last Modified: Sunday, 16-Nov-2008 08:51:57 EST