Storm Worm Authors Turn to YouTube Lures

Security Fix has spilled quite a bit of digital ink warning readers about the ever changing tactics of criminals behind the the indefatigable “Storm worm.” This week’s tactic (or today’s as the case may be) involves e-mailed Web links disguised as video clips from YouTube.com Here’s one example that I received yesterday: The link in the image on the right does not take the clicker to YouTube.com, but to an Internet address of a home computer that the bad guys have compromised and are using to serve up malicious software. If you hover over the link with your computer mouse, it should reveal that the true address is a dotted IP address (e.g. 72.15.x.x), not a page at YouTube.com. After a user clicks through to one of the Storm addresses, the machine at that address will attempt to exploit a kitchen sink of known Web browser and other software [...]

Read more…


Leave a Reply

You must be logged in to post a comment.