Storm worm spam spoofs YouTube

A spam blast released over the weekend invites recipients to see themselves in a YouTube video, but the included link directs them to a website that downloads a package of a dozen different pieces of malware.

According to Exploit Prevention Labs, the link in the spam message looks like a YouTube link, but is to a site that downloads the Q4Rollup package, an encrypted collection of keyloggers, spyware, rootkits and other malware.

Visitors to the site are directed to download software to view the video, at which point the malware is transferred to their PCs.

The storm worm, a Trojan horse that secretly infects PCs and turns them into members of a botnet that attacks other PCs, has been busy of late. First detected in January, the malware has been used in the last few weeks in a confirmation spam scam and has also been leveraged in blogs and Web message forums.

2014 ARN Women in ICT Awards - Nominations close October 27!: Nominations have opened for WIICTA 2014 and will stay open until October 27. But don't be late, be among the first in and NOMINATE NOW!!!

More about Exploit Prevention Labs

Comments

Comments are now closed

 
Computerworld
CIO
Techworld
CMO

Latest News

02:05PM
20th Century Fox deploys HP Moonshot servers
01:27PM
Adobe begins encrypting user data collected from Digital Editions app
12:17PM
St George turns on fingerprint login for Apple iOS Internet banking
12:01PM
DDoS attacks skyrocket: Akamai State of Internet Report
More News
29 Oct
NewLease & Microsoft Technical Sessions
30 Oct
Ovum 2020 Telecoms Summit
30 Oct
NewLease & Microsoft Technical Sessions
05 Nov
vForum 2014
View all events