Business Intelligence |    Certification |    Cloud Computing |    Community Manager |    CRM/ERP/ETL |    Data Center |    Database |    Enterprise 2.0 |    Enterprise Applications |    Featured stories |    Free Trials |    Green Technology |    Guest Bloggers |    Identity |    Information Technology |    IT Compliance |    IT Decision-making |    Networking |    On-Demand |    Patch Tuesday |    Podcasts |    Programming |    Security |    Social Computing |    Social Media |    Software |    Storage |    Telecommunication |    Videos |    Virtualization |    Windows |    Wireless

YouTube Comments Loaded With Malware Links
by Tek-Tips

Tek-Tips

The Panda Labs blog details how malware is spreading on YouTube comments through the use of “Malspam,” that leads users to malware sites where users are duped into paying for bogus software.

The trap is becoming increasingly common on social sites. According to Panda Labs, Rogue Antivirus, is one of the most prolific malware in today’s threat landscape. PandaLabs has received more Rogue Antivirus samples in Q1 of 2009 than in all of 2008.

rogueavi

Panda Labs discovered about 30,000 “Malspam” comments on YouTube, all pointing to a fake pornography website called “PornTube 2.0″

Malicious Comments on YouTube

The comments target people looking for pornography through keywords like kinky, porn, sex, etc.

The PornTube 2.0 site looks like a YouTube page. When clicking on the video, a download box appears for a fake Adobe Flash plugin, which is the malware installer for Adware/Privacy Center.

Once the malware is downloaded it scans the computer and tells the user that their computer is infected. They are then directed to a site where they pay for the bogus software.

Tags: , , , , ,



Share
                                                 
sharebar end


This entry was posted on Sunday, May 24th, 2009 at 1:58 PM and is filed under Community Manager. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.


Comments



Leave a Reply
 

You must be logged in to post a comment.

 



 
Related Tweets




Syndicated Content
  Making The Buy For Trust Seal
For ease of access, we have added a 'Buy' button to the very top of the Trust Seal landing page. This helps to ensure that it is easily visible and accessible to users and that it doesn't get missed further...

VeriSign At SES
The VeriSign Authentication team was at SES last week talking up the VeriSign Trust Seal which was recently launched in February, and Seal-in-Search - a service where search engine users can see the VeriSign Trust Seal next to sites protected...

VeriSign Now a Symantec Company
We are very excited to be a Symantec company! If you haven't already heard, VeriSign has been acquired by Symantec. The deal was made official on August 9, 2010. We are very excited about new opportunities for increasing and offering...

  PayPal UK Launch Security Key - Guest Posting from PayPal
I am happy to say they are using VeriSign Identity Protection to deliver this, which means that PayPal Customers will be able to use their token at other sites who join the VIP network. PayPal are the first UK members of the network, but there are around 30 other members in different countries around the world so you can expect to see more places where you can use your token in the UK appearing shortly.

Facebook scam - Part 2
This just in from the BBC web site, Symantec have identified a virus that steals user names and passwords, nothing new there. But, if I understand this right, it is delivered through a Facebook invitation from someone you don't know and delivers malware which can then steal user names / passwords and also keylog credit card info.

Survey finds passwords are not secure - well d'uh!
I don't think the vendor community has been crying wolf about the problems that stronger authentication solves, more like highlighting that this problem is here and growing. Well the discussion I have had recently with many different organisations across many different industries are now resulting in more and more consumer projects in this area

  Cloud Identity, Trust and the Liability Elephant.
I have been involved with a couple similar initiatives around certification for identity and thought it would be interesting to explain the logic behind these efforts. The first initiative is led by the Open Identity Exchange and is based on...

Greek Heroes, Facebook and Trust
When Achilles was a baby, the oracle predicted that he would die in battle from an arrow. Thetis, Achilles' mother who did not want her son to die decided to dip Achilles' body into the water of a river that...

PCI for the Cloud
For most enterprise and security vendors, the cloud is fascinating both as a technology and a business disruptor. In fact, SAAS CEOs such as Successfactor, SalesForce and NetSuite are hot shots in Silicon Valley these days. Yet, most of us...

Search
 Whitepaper   Webcasts  Videos  All

     


Member Login
User Name  :    Password  : 

Register | Forgot Password

Featured blog

Favorites

Other Posts

Sponsors
        

Sign up to receive email notifications about our newest white papers
.........................................................................
           Full Name  : 
Email Addresss  : 
   Confirm Email  : 


Breaking News
 
Featured stories