Fake YouTube video scam

HURST · Nov 20, 2007

Following news translated from spanish, just appeared on the "last minute" feed of a Chilean newspaper.

A new thread inviting users to watch a YouTube video was discovered by Websense Inc.
When following the link, a page similar to YouTube is opened, informing that the video can not be loaded, and asks the user to download and install a flash player.
Acording to what was found out, the site is hosted at a server which has hosted over a thousand of phishing sites in the last 4 months. This server is managed by RockPhish, group who is responsible for a great share of phishing sites.

The file downloaded is called "install_flash_player.exe", weights 1.2 MB and it's MD5 is "fb38066c348aaf5bf0d6513a2e635490".

The infected URL (edited for safety) is: "www5.youtube.com.site670221.X.X /watch/v/install_flash_player.exe".
Click to expand...

See article (in spanish) here http://www.emol.com/noticias/todas/detalle/detallenoticias.asp?idnoticia=282551

The security alert was issued a week ago at websense's page, see it here: http://www.websense.com/securitylabs/alerts/alert.php?AlertID=818

Log in or Sign up

Fake YouTube video scam

HURST Registered Member

Log in or Sign up

Fake YouTube video scam

HURST Registered Member

Useful Searches