"A good horse should be seldom spurred"

Thomas Fuller (1608-166) British clergyman and writer
(May 23, 1493, begins the story of the horse in America when the Catholic King and Queen shipped to America twenty-five horses)

Almost 30,000 videos on YouTube contain comments with links to a malicious Web page, reports PandaLabs

This is yet another example of how cyber-criminals are attacking popular Web 2.0 sites to distribute malware. Such attacks have previously been seen, to a lesser extent, on sites including Digg.com and Facebook. Now, PandaLabs, Panda Security's malware detection and analysis laboratory, has detected up to 30000 videos on YouTube with comments containing links that point to a Web page designed to download malware.

The comments are normally suggestive, claiming that the link will take users to a legal Web page with pornographic content. You can see an image here: http://www.flickr.com/photos/panda_security/3548358349/

However, when users click the link, they are taken to a page that spoofs the original and which is really designed to download malware. On this page, users will be prompted to download a file in order to be able to view the video. If they take the bait, users will really be downloading a copy of the PrivacyCenter fake antivirus http://www.flickr.com/photos/panda_security/3548358229/

This malware, when run on a computer, pretends to scan the system, supposedly detecting dozens of (non-existent) viruses. It then offers users the chance to buy the paid version of the antivirus to clean their computers. The ultimate aim of cyber-crooks is to profit from the sale of this 'Premium' version. http://www.flickr.com/photos/panda_security/3548362019/

"The technique of using malicious comments on YouTube is not new in itself. What is alarming however, is the quantity of links we have detected pointing to the same Web page. This suggests that cyber-criminals are using automated tools to publish these comments", explains Luis Corrons, Technical Director of PandaLabs.

All images are available here: http://www.flickr.com/photos/panda_security/tags/privacycenter/

more information at PandaLabs blog

Tell us about your malware experiences and win 2 months' Panda Internet Security 2009 services free http://www.pandasecurity.com/homeusers/media/malware-stories/

You can receive the Panda Security news automatically by adding this URL (http://feeds2.feedburner.com/pandasecurity) to your feed reader.

For up-to-date computer security news go to the Panda Security Twitter.