Warning this article may contain opinions of the author that you and iTWire don't agree with.
Visit the last page to have your say in our forum.
PDFPrintE-mail

YouTube “malware” sites threaten web users

Opinion and Analysis

A warning has gone out that fake YouTube pages are loading malware onto users’ computers - how can you protect yourself?!

Have you seen a page with a YouTube style video window showing a message that it needs to download a “codec” to play the video file?

If so, you’ve come across a malicious site – one that is trying to get you to voluntarily install some malware onto your computer.

That malware could then do whatever its creator intended – deliver ads, log your keystrokes, do screen captures, steal information from your hard drive, join your computer up to a botnet or worse.

Now the news comes from the Associated Press (AP) that online criminals are creating pages that look just like YouTube pages to do the exact same thing, potentially even showing you the actual YouTube video you wanted to see after the malware was successfully loaded.

Much like phishing emails take you to a bank or other site that looks legitimate, hoping you’ll enter in your username and password, so are these “web phishing” sites using social engineering tactics to fool you into doing something that looks completely harmless yet is opening you up to the perils of malware.

The AP notes that hackers now have access to software that helps them build these fake sites, so an explosion of online fakery and drive-by download attempts (whether automatic or through a user “voluntarily” loading something after being fooled) is not only likely but clearly already happening.

As always, the advice is simple – if you see one of these “codec” requests at what appears to be a YouTube site, close the browser window and type in www.youtube.com into your browser instead.

But what’s the latest “click” threat that might make typing in a web address yourself less safe, and what can you do to protect yourself? Please read on to page 2.



SPONSORED ANNOUNCEMENTS

Top Five Tips for Securing your Business Reputation from AVG (AU/NZ)

Wednesday, 10 March 2010

There have been recent reports of how a Twitter scam has affected some well known UK politicians, issuing embarrassing Tweets from their personal accounts. Whilst these headlines may seem amusing, Lloyd Borrett, the Marketing Manager at AVG (AU/NZ), says it is worth considering the potential impact of this type of scam on your business reputation.

Featured IT jobs

Technical Architect wanted urgently for an immediate start
Skills Tags:   Access  Internet  Java  Oracle  Support  XML
Leading technology provider is looking for a Senior Java/J2EE Developer to join them on a 3 month contract. Based in North Sydney, immediate start!
Skills Tags:   IBM  Integration  J2EE  Java  UML  WebSphere
Large global organisation seeking an ASP.NET Developer. To provide mainly support service to development team.
Skills Tags:   .NET  ASP  C#  IIS  SQL  XML
Brisbane
Java Developer
This is an exciting 6 month contract opportunity to work for a global organisation and make a significant contribution to the development of cuttin...
Skills Tags:   Agile  Design  J2EE  Java  Security  WebSphere

Editors Picks

Stories you may have missed 

What iTWire offers for free

E - mail News SMS Headlines Desktop Alerts News Feeds Job Alerts Technology Events Press-Releases