YouTube Malware Warning

Might want to think twice about surfing on company equipment.

"Over the last seven days, two major threats have been exposed that relate to these sites: Pfizer lost the personal details of 17,000 staff members after a company laptop was used to access a P2P network that deposited a 'back door Trojan' on the device," says Alex Raistrick of ComSentry.

Full Read
http://www.tech.co.uk/computing/internet-and-broadband/news/youtube-poses-major-malware-threat?articleid=243689287

 

Doesnt say which site it was,I'll bet it wasnt youtube though,whats the youtube threat confused

 

Does this mean that if you WATCH Youtube stuff, then you are highly likely to get infected? I guess that if you have good spyware/virus protection installed, then you will be okay. My opinion

 

This is pretty specific.....
The chief YouTube culprit is the Ziob trojan, which poses as a fake video file and then bombards users with ads. The ads have the potential to contain ID stealing code according to Secure Computing and ComSentry Network .

But I agree with you Rikky. The YouTube headline is a powerful way to draw people into the article. Then they quickly revert to P2P.

My opinion is it will only be a matter of time before people start getting hammered. It is summer and the young hackers have more time on their hands to see how they can destroy peoples stuff. And YouTube would be a desirable candidate to target.

 

My bad,yeh thats what I was getting at though

 

It seems like there was a bit of viral activity with MySpace too. Not nearly as many bugs, now that the kids aren't surfing myspace for hours.

 

The usual way that you will get infected on a site like this is when you click on a "Play video" link a pop-up will appear saying something along the lines of

"You don't have the proper codecs to watch this video, Install now?"

and you have to agree to install the codecs or whatever else they may be calling it. I would advise against installing anything from a pop-up from there.

There are proper warnings like "You need Quicktime to view" and things along those lines but to be safe I would not install anything.

 

Thats not what I got from the article.

What I read was the the code is embedded in the video.

 

Check out this link:

http://www.trendmicro.com/vinfo/sec...poses+as+fake+video+codec,+loads+more+threats


About half way through the article it reads

"Once unsuspecting users click on the link, they are indeed redirected to a site that contains a video file. However, this video does not seem to be working because it needs a special codec in order to play properly. Thus, these users are then prompted to download and install the "codec", which is actually a copy of the Trojan."

 

Good read.

But search Ziob not ZLob.

I'm not trying to disagree or argue with you, but it seems the trojan they are describing is embedded in the video code itself. Therefore just watching will indeed infect you.

 

No argument from me. I've just never heard of Ziob.





Aparently neither has the company quoted in the article.

 

Perhaps it's the 'ZLOB' they're talking about BirdBath?

 

That's what I thought. Check out my post #12. I think it's a misprint in the article.

 

Aah thanks, I missed the post.

 

I'm not going to have a pissing contest here, you are smart enough to Google it and see it is mentioned in more than one article. I am sure Tech News sites have done standard double checks before printing news identifying specific sites in order to cover themselves.

Either believe it or don't. I thought it was interesting news and I still do.

Now I'm off to watch some YouTube.

 

Ziob Trojan is not mentioned anywhere that I can find, so what's to piss about?

I was just letting some people know how Zlob Trojan gets on your system.

Believe what you want. rolleyes

 

http://news.softpedia.com/news/Viewing-YouTube-Clips-Might-Infect-Your-Computer-57929.shtml

http://blog.netchoice.org/

There are more.

 

Those both link to the original story. Maybe it's a European thing.

No mention of Ziob at Symantec, Trend Micro, and the other major players.

 

I agree it could be a misprint, it's just that you would think the Tech Reporters would know better. At least one of them should have caught it if it were wrong.

 

It will probably come up.

Thanks for the you tube warning anyway.