Illegal content on YouTube? Beware spammed-out malware attack

Filed Under: Malware, Spam

Youtube malwareInternet users are being warned about a malware attack that has been spammed out widely, posing as a communication from YouTube about copyrighted video content.

The emails, which have the subject line "Your video may have illegal content", pretend to come from Google's YouTube team.

Here's an example:

Malicious email, claiming to come from Google regarding illegal YouTube content

Subject: Your video may have illegal content
Attached file:

Message body:
Your video may have content that is owned or licensed by Music Publishing Rights Collecting Society.

No action is required on your part; however, if you are interested in learning how this affects your video, please open attached file with Content ID Matches section of your account for more information.

- The YouTube Team

The attached ZIP file, however, contains the Troj/Agent-XXC Trojan horse.

Sophos anti-virus products have been capable of detecting the malware since September 25th - but users of products from other vendors may not be as well protected.

Always be suspicious of unsolicited emails - and don't rush to click on unexpected attachments.

, , ,

You might like

3 Responses to Illegal content on YouTube? Beware spammed-out malware attack

  1. Jack · 1089 days ago

    "Music Publishing Rights Collection Society"

    There's your clue that this is BS. No further reading required.

    • Laurence Marks · 1089 days ago

      Well, yeah, presuming your native language is English.

  2. Check the language also: most of these scams' structure of the words is quite off.
    In the above, it ought to be "the attachment" not attachment

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley runs his own award-winning computer security blog at, and is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Follow him on Twitter at @gcluley