More fake YouTube malware sites

Though this Saturday is reasonably quiet, on the malware and on the spam front, the fake YouTube campaign mentioned previously by Dmitry continued on another compromised site. This is most probably, judging by the URL (index7.html is used as the page that serves the fake YouTube page) part of the same attack.

This time the compromised page serves a new Tibs variant which Sophos products detect as Troj/Tibs-UV.