Up to 4 900 videos on YouTube contain links that point to a Web page designed to download malware, says Panda Security.
Cyber criminals have latched onto YouTube to distribute malware by adding comments and a link in an attempt to lure unsuspecting users onto a malware-infected Web site.
“The comments are normally suggestive, claiming the link will take users to a legal Web page with pornographic content,” says Jeremy Matthews, head of Panda's sub-Saharan operations.
“However, when users click the link, they are taken to a page that spoofs the original and which is really designed to download malware. On this page, users will be prompted to download a file in order to be able to view the video. If they take the bait, users will really be downloading a copy of the Privacy Centre fake anti-virus.”
Matthews adds: “The technique of using malicious comments on YouTube is not new in itself, but what's alarming is the quantity of links we have detected pointing to the same Web page. This suggests cyber-criminals are using automated tools to publish these comments.”
This malware, according to Panda Security, when run on a computer, pretends to scan the system, supposedly detecting dozens of non-existent viruses. It then offers users the chance to buy the paid version of the anti-virus to clean their computers.
The ultimate aim of cyber crooks is to profit from the sale of the fake anti-virus program, the company explains.
Earlier this year, Panda Security said VideoPlay, a code used to download a worm, uses this malware distribution tactic. The worm spreads into the system drives and tries to steal information and login passwords stored in the Internet browser. The security vendor says it detected over 400% more examples of the adware VideoPlay in February this year compared to January.
Related stories:
Panda IDs Facebook worm
YouTube used to spread malware
End of traditional malware signatures
Online fraud 101
Share