News Article: YouTube Malware, The Easy Way

[Ehtyar]

A new tool makes it easy for users to spread malware through YouTube.

Cybercriminals are getting more and more business-like. The latest examples involve a tool that automates the creation of fake YouTube Web sites that can be used to deliver malware and password-cracking services for sale.

Panda Security said it has uncovered a tool circulating in underground hacking forums, dubbed YTFakeCreator, that enables anyone to easily create a fake YouTube page that surreptitiously installs a Trojan, virus, or adware on a visitor's computer, said Ryan Sherstobitoff, chief corporate evangelist of Panda Security.

Full Story
Technical Details

Ehtyar.

[f0dder]

"Fake youtube page"?

Does this mean a site that kinda looks like youtube, which users will then be tricked to via DNS poisoning, malformed URLs, javascript/flash redirection tricks etc.?

[Josh]

So, basically, it's another case of "Look at the URL before visiting"?

[Ehtyar]

Hmm, I didn't read it that way, but it certainly makes sense. The article doesn't appear to make a direct statement either way, but I'm guessing you guys are right, which makes this exploit a lot less dangerous than I first suspected.

Ehtyar.

[Josh]

Wait, you don't read what you post?!?!?!?

[f0dder]

He doesn't look at URLs before clicking, either

[Ehtyar]

Wait, you don't read what you post?!?!?!?

-Josh (September 14, 2008, 07:56 AM)

Apparently you don't read what I post bitch

He doesn't look at URLs before clicking, either

-f0dder (September 14, 2008, 08:12 AM)

Wha..?

Ehtyar.

[f0dder]

He doesn't look at URLs before clicking, either

-f0dder (September 14, 2008, 08:12 AM)

Wha..?

-Ehtyar (September 14, 2008, 08:18 AM)

I'm in your computer, watching your pr0n. Be careful what you click next time!11!1! one one