New Spam Campaign Targets YouTube

As per the security experts at a German antivirus company 'Avira', YouTube is being exploited by the spammers to initiate a new spam campaign.

As per a statement published by sofpedia on July 12, 2010, the researchers at Avira received a bulk of mails in the past few days with subjects - ''User <username> suggesting users to become friends at YouTube.' The researchers have also highlighted the fact that the "From" column in these mails has been manipulated in such a way that it seems to have originated from the "YouTube service."

Moreover, the body of these emails starts with the same content as the one mentioned in the subject field. The e-mail further states that offers and the acceptance of friendship offers by friends are now easy to trace along with the transfer of videos to other users. To accept or deny this request, please pass the attached file.

As per Avira, these emails have an HTML file attachment called "YouTube Message.html." This file encourages users to open the HTML page their on web browsers. This HTML file comprises encrypted JavaScript to evade mail filters.

Avira comments that once the JavaScript is decrypted, it becomes pretty clear that it redirect the web browser to a website. Further, this website acts as another redirector. In this second redirect, a concealed iframe is involved that attempts to download a malicious code on the user's computer system by taking advantage of vulnerabilities in obsolete software.

Avira reports that it has identified this JavaScript as JS/Redirect.qrl and the hidden iframe it endeavors to redirect as HTML/IFrame.cef.

The security company also reveals the fact that English speaking people can easily figure out that
these are spam mails because the message is very badly spelled and written

Due to the problems linked with such spam mails & campaigns and the threats related to such programs, users are suggested to keep their computer applications totally upgraded, especially in case of downloading browser plug-ins such as the Adobe Reader, Java Runtime by Avira or the Adobe Flash player. The installation of an antivirus program (proficient in recognizing and scrutinizing threats over the HTTP) can protect computer applications while browsing the web, suggests the firm in its advisory.

Related article: New Zealand Releases Code To Reduce Spam

» SPAMfighter News - 7/22/2010