Illegal content on YouTube? Beware spammed-out malware attack

Filed Under: Malware, Spam

Youtube malwareInternet users are being warned about a malware attack that has been spammed out widely, posing as a communication from YouTube about copyrighted video content.

The emails, which have the subject line "Your video may have illegal content", pretend to come from Google's YouTube team.

Here's an example:

Malicious email, claiming to come from Google regarding illegal YouTube content

Subject: Your video may have illegal content
Attached file: Content_ID755658_Matches.zip

Message body:
Your video may have content that is owned or licensed by Music Publishing Rights Collecting Society.

No action is required on your part; however, if you are interested in learning how this affects your video, please open attached file with Content ID Matches section of your account for more information.

Sincerely,
- The YouTube Team

The attached ZIP file, however, contains the Troj/Agent-XXC Trojan horse.

Sophos anti-virus products have been capable of detecting the malware since September 25th - but users of products from other vendors may not be as well protected.

Always be suspicious of unsolicited emails - and don't rush to click on unexpected attachments.

, , ,

You might like

3 Responses to Illegal content on YouTube? Beware spammed-out malware attack

  1. Jack · 711 days ago

    "Music Publishing Rights Collection Society"

    There's your clue that this is BS. No further reading required.

    • Laurence Marks · 711 days ago

      Well, yeah, presuming your native language is English.

  2. Check the language also: most of these scams' structure of the words is quite off.
    In the above, it ought to be "the attachment" not attachment

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley runs his own award-winning computer security blog, and is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.