Thursday, June 10, 2010

Insidious social engineering email claims to be from YouTube

Costin Raiu at Kaspersky Labs blogged about this malicious little gimic and I though it was insidious enough that it should be publicized further.

Raiu uploaded his first HD movie to YouTube and immediately got an email from YouTube that said �Congratulations on your first YouTube upload!� and gave some hints and tips.

Several hours later he got another email that said: �Hello, Have you tryed (sic) YouTube Toolbar?� The misspelling set off alarm bells in his head, he investigated and found that the email message that he received included a link that would download a variant of Backdoor.IRC.Zapchast.

Raiu blog post: �YouTube Toolbars�

Sunbelt description of Backdoor.IRC.Zapchast here.

It's just one more instance that supports the security rule: "don't click on links in email from strangers and think twice about clicking on links from those you know."

Tom Kelchner

No comments:

Post a Comment