Winwebsec on YouTube

[funkydude]

-{ Quote: "In a previous blog, you may have read about rogues using a fake YouTube page to entice users into downloading and installing a rogue security trojan. We are now showing you the ‘real deal’. We discovered a page (there are probably more) within the real YouTube.com (fig. 1) website trying to benefit from its user database by redirecting them, by means of social engineering (i.e. viewing an episode of a popular cartoon series) to another page (fig. 2). The malicious page pushes a fake video codec to install a copy of the trojan “Win32/Winwebsec”." }-

http://blogs.technet.com/mmpc/archive/2009/08/20/winwebsec-on-youtube.aspx

[Keyboard_Commando]

I have been warning my family and friends not to follow embeded redirects and links from Youtube for a while now. I don't like the way Youtube has allowed embedding links into the clips - It's just retarded. "See the better HD version here" and so on is just so tempting.

Just today I was looking at music videos and one of the videos didn't actually play the clip in the title. Instead it had a link to the side saying the media rights were in breach so follow the link - to some personal website.

Risky Risky

[Meriadoc]

-{ Quote: "In a previous blog, you may have read about rogues using a fake YouTube page to entice users into downloading and installing a rogue security trojan." }-
Variations on a theme I've seen many ....Tube (fill in the gap) type sites popup pushing fake codecs, and have collected many samples. I also come across that one on youtube and should imagine both entice many a not so savvy a user into trouble.

[SIR****TMG]

Nice read you guys" Thanks" for the heads up.:thumb: