More fake YouTube malware sites

Filed Under: Malware, SophosLabs, Spam

Though this Saturday is reasonably quiet, on the malware and on the spam front, the fake YouTube campaign mentioned previously by Dmitry continued on another compromised site. This is most probably, judging by the URL (index7.html is used as the page that serves the fake YouTube page) part of the same attack.

This time the compromised page serves a new Tibs variant which Sophos products detect as Troj/Tibs-UV.

fakeyoutube1.jpg

You might like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Vanja is a Principal Virus Researcher in SophosLabs. He has been working for Sophos since 1998. His major interests include automated analysis systems, honeypots and malware for mobile devices. Vanja is always ready for a good discussion on various security topics.