NOW READ THIS
("Security Advisory")
Submitted by: Bill Hickey
NCVA Listmaster
NRT-0632 Criminals use fake YouTube pages to spread
malwar:
A new compromise tactic has been detected recently in which
criminals create fake YouTube pages ‑ exact replicas of the real Web site
‑ to promote malicious software, according to an online IT news report.
Users who follow an e‑mail that directs them to one of the pages receive
an error message claiming the video will not play without installing new
software. The error message includes a link to a malicious program, which
delivers a virus. Once the computer is infected, the hackers are able to
silently redirect the victims to a real YouTube page to watch videos they were
hoping to see, thereby hiding the crime. "It's spot‑on accurate,
and that is scary," said Jamz Yaneza of security software company Trend
Micro. "If I were watching YouTube videos all day I would probably click on
this one." The attack still contains telltale warning signs. For example,
the Web browser does not show the real YouTube's Internet address; and to
even see the malicious page, users must first follow a link that is sent to
them.
(apnews.myway.com, 08OCT08)