Phishers target YouTube users

Stephen Withers
Wednesday, 14 November 2007 10:20

Your IT - Home IT

A notorious phishing group is allegedly responsible for distributing a Trojan masked as Adobe's Flash Player.

According to Websense, the "Rock Phish" group is using spam to attract people to a fake YouTube page which in turn offers to download what it says is a Flash Player but is really malware.

Websense officials say the bogus installer is called install_flash_player.exe and downloads from the URL www5.youtube.com.site670221.X.X/watch/v/install_flash_player.exe (the domain name has been masked to protect the unwary from visiting it).

"The site is hosted on a server that has hosted more than one hundred phishing sites over the last four months," a Websense spokesperson said. "This server is managed by the infamous 'Rock Phish' group, which is the largest phishing gang on the Internet and which is responsible for the majority of Phishing URLs."