Discussion in 'malware problems & news' started by ronjor, Jun 20, 2007.
This sounds like either a false alarm, or misreporting to me. I fail to see how anyone can embed a trojan in a video published on Youtube since, after uploading, all videos are converted to the Flash (.flv) format by Youtube, so an embedded trojan simply wouldn't survive the conversion process.
Possibly - but do you remember the Quicktime vulnerability? It was felt by thousands of Myspace users - whereby a .mov security hole allowed a remote computer to download a trojan program to your machine, silently, just by you watching the video. The attackers may be exploiting such a security hole in the flash video player code.
More info which confirms that it´s not possible to put trojans in flv files, at least not yet.
Yeah, this seems more and more just rubbish. The only thing even remotely malicious I've seen so far on YouTube was this crappy game video that said at the end "download the full game here" with an URL, and if you went to that (external) link, downloaded, and installed the thing you would get a malware.
There's much more to worry about than YouTube, that's for sure.
Separate names with a comma.