 YouTube videos and links to a malicious Web page |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.  |
 May 23 2009, 08:07 AM
Post
#1
|
|
 Computer Masochist  Group: Moderator Posts: 22,937 Joined: 27-January 07 From: Cleveland, Ohio Member No.: 108,618  |
QUOTE This is yet another example of how cyber-criminals are attacking popular Web 2.0 sites to distribute malware. Such attacks have previously been seen, to a lesser extent, on sites including Digg.com and Facebook. http://www.pandasecurity.com/emailhtml/oxy...2309_ENG_in.htm This post has been edited by garmanma: May 23 2009, 08:08 AM -------------------- Mark
 why won't my laptop work? Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits Become a BleepingComputer fan: Facebook and Twitter |
 |
 
|
|
May 23 2009, 10:00 AM
Post
#2
|
|
 Member  Group: Banned Posts: 71 Joined: 12-April 09 Member No.: 320,113 |
 Yah , I already know about the Facebook Worm that uses YouTube video links to spread the worm.They are using a similar tactic with Digg.com & now are going after My Space. With Digg.com don't click on any links in the comments. To my knowledge YouTube itself is safe, just don't click on any links in the comments. Just don't click on any links you do not trust & don't click on any video links on Facebook or My Space ( even if the link says it's from YouTube do not click on it !).  This can all be avoided if Facebook,Digg.com , My Space & YouTube did there job & monitored an removed the malicious links through moderators.
This post has been edited by koolkat: May 23 2009, 10:11 AM |
|
|
|
|
May 23 2009, 07:50 PM
Post
#3
|
|
 I know the drill! Group: HJT Team Posts: 5,816 Joined: 24-July 08 From: London Member No.: 224,929 |
QUOTE(koolkat @ May 23 2009, 04:00 PM)  This can all be avoided if Facebook,Digg.com , My Space & YouTube did there job & monitored an removed the malicious links through moderators.How many moderators would that take? I can't see that to be feasible with the amount of clips/comments that are made on these very popular sites. --------------------  m0le is a proud member of UNITE (Unified Network of Instructors and Trusted Eliminators) If I have helped you fix your PC then please donate to the anti-malware cause. Thanks |
|
|
|
|
May 23 2009, 10:11 PM
Post
#4
|
|
|
Indecisive Lurker Group: Members Posts: 1,232 Joined: 14-February 08 From: A galaxy far, far away... Member No.: 190,231 |
Also, given what I can see on Youtube, there isn't a true way of reporting something to a moderator of Youtube. The only thing I notice is the flagging system, but that's more to the video being inappropriate, if I want to assume right. The other sites mentioned, there isn't really a true way to moderate that, especially since it'd take maybe thousands to hundreds of thousands of moderators to go through those sites and clear out the "bad stuff" and make it malware free.
-------------------- Posting lurker of bleepingcomputer.com
Because I post more than I lurk |
|
|
|
|
May 24 2009, 05:20 AM
Post
#5
|
|
|
Member Group: Banned Posts: 71 Joined: 12-April 09 Member No.: 320,113 |
 We live in the age of computers right ? They could figure out a automated system to filter out the malicious links.An somewhere we could report malicious links to them to investigate. Facebook is already exercising censorship , in case you didn't know. God , there is just too many of you here stuck on "can't" when it "can".
This post has been edited by koolkat: May 24 2009, 05:21 AM |
|
|
|
|
May 24 2009, 06:46 AM
Post
#6
|
|
|
I know the drill! Group: HJT Team Posts: 5,816 Joined: 24-July 08 From: London Member No.: 224,929 |
QUOTE(koolkat @ May 24 2009, 11:20 AM) We live in the age of computers right ? They could figure out a automated system to filter out the malicious links.Sorry, Koolkat, I'm with scff249 on this one. They can't do that accurately with personal emails, they certainly won't be able to filter out malicious links throughout an enormous, data-heavy website. These links cause these sites an enormous headache and if they could remove them they would. Remember which company run YouTube...if they haven't developed something yet it's because they can't not that they don't care. It's a "can't" attititude because, at the moment, you "can't". -------------------- m0le is a proud member of UNITE (Unified Network of Instructors and Trusted Eliminators) If I have helped you fix your PC then please donate to the anti-malware cause. Thanks |
|
|
|
|
May 24 2009, 01:28 PM
Post
#7
|
|
|
Member Group: Banned Posts: 71 Joined: 12-April 09 Member No.: 320,113 |
This isn't about personal emails.
This is about posting malicious links or malicious video links on the "comments" not with anything to do with personal emails ( with personal emails it is called "spam" & you can monitor this yourself).  If you think Youtube,Digg.com, Facebook & Myspace "can't " do anything about the "comments feature"then there is something wrong with you.  It is actually "won't" not "can't" with the case of Youtube,Digg.com, Facebook & Myspace refusing to monitor the "comments feature". Apparently you "can't" read either because neither garmanma or I said anything about personal emails.
This post has been edited by koolkat: May 24 2009, 01:34 PM |
|
|
|
|
May 24 2009, 02:17 PM
Post
#8
|
|
|
Indecisive Lurker Group: Members Posts: 1,232 Joined: 14-February 08 From: A galaxy far, far away... Member No.: 190,231 |
The malicious links in the comments sections of Youtube videos still can't be filtered out so easily. You're talking on comments that probably has reached the billions. I don't know if an automated system could filter all of that out. The other thing is that there's a button in the comments section that can mark a comment as spam, but there's also a counterpoint in that, that being that something that is legitimate can be marked as spam. There are some users on Youtube who will delete the comment themselves, but I'm not sure how many will do that.
As for the e-mails thing, I believe m0le was speaking on Facebook and Myspace with the e-mail system. I'm not a web developer or any of that sort, so I wouldn't understand the source code of those things nor would I understand how those things work, but I just want to assume that it's not as simple as just filtering out stuff. Even just the mere mention of a keyword could possibly create a flag or something. Again, I'm not sure on how all of this works. Can you prove that they're doing nothing about it because they don't want to? Or is it because they can't with all of the stuff that goes on? They aren't forums where they can be more easily monitored with trustworthy members and such. We're talking on a community of stuff and whatnot and (great, now I'm talking in circles). My point is, don't jump to conclusions without taking all of the possibilities into account. This post has been edited by scff249: May 24 2009, 02:18 PM -------------------- Posting lurker of bleepingcomputer.com
Because I post more than I lurk |
|
|
|
|
May 24 2009, 02:36 PM
Post
#9
|
|
|
Member Group: Banned Posts: 71 Joined: 12-April 09 Member No.: 320,113 |
 My point they can the reason they won' t is because they rather you get infected than spend the money. Nobody but you guy's ( scff249n & m0le) are talking about flipp'in e-mails !! Sure a automated system would work. Facebook is already using a automated system to censor your very words !!
|
|
|
|
|
May 24 2009, 02:57 PM
Post
#10
|
|
|
Indecisive Lurker Group: Members Posts: 1,232 Joined: 14-February 08 From: A galaxy far, far away... Member No.: 190,231 |
QUOTE My point they can the reason they won' t is because they rather you get infected than spend the money. How do you know that? If you have anything that says they do that, then please enlighten us instead of just saying. QUOTE Sure a automated system would work. Facebook is already using a automated system to censor your very words !! You make absolutely no sense here. I do have a facebook account that I check every once in a while, and it's not automated from what little I have on it. -------------------- Posting lurker of bleepingcomputer.com
Because I post more than I lurk |
|
|
|
|
May 24 2009, 03:04 PM
Post
#11
|
|
|
Member Group: Banned Posts: 71 Joined: 12-April 09 Member No.: 320,113 |
If I type "bleep" on someones Facebook page they see it as something like this @!#%. If anyone makes some terrorists threats like from Al Qaeda it gets automatically censored on Facebook. heck they even have a automated censor system here.
This post has been edited by koolkat: May 24 2009, 03:07 PM |
|
|
|
|
May 24 2009, 03:53 PM
Post
#12
|
|
|
I know the drill! Group: HJT Team Posts: 5,816 Joined: 24-July 08 From: London Member No.: 224,929 |
QUOTE Nobody but you guy's ( scff249n & m0le) are talking about flipp'in e-mails !! My point (which scff also took up) is that these filters are not accurate even at the basic level of personal email. They can easily be dodged around by spammers. I was trying to make the point that if personal emails can't properly be filtered from spammers and protected from malware links then anything more expansive such as a large social website would have absolutely no chance. Yes, you can have filters that block out specific words, for instance this site, but if the spammer changes one character to something that reads as that letter but isn't that letter - try "a" for "@" then the filter is useless. Why do you think you get adverts for "V1@gr@"? What would you put in a filter to kill the link? If you filter words that malware programmers love to use like "antivirus" found in a URL then they will just change the URL to something else. If you add that to the filter then they change it again. Filters are programmed by humans and cannot think. Then there's the human angle. BC has a handful of mods and many great members that keep a check on the site. But YouTube and Facebook are so much larger than a forum. The videos, apps, on-screen and text comments would be impossible to screen for. Also, you say that these large sites would rather you got a virus than they pay for monitoring? How good is it for a large company - relying on hits to drive traffic for advertisers to pay their hosting fees to run a profit - to be unwittingly passing on malware links and infections? It is an online business killer and if Google could remove it completely they would. It is their entire business. They can't because as yet no-one can come up with a good enough filter system. -------------------- m0le is a proud member of UNITE (Unified Network of Instructors and Trusted Eliminators) If I have helped you fix your PC then please donate to the anti-malware cause. Thanks |
|
|
|
|
May 24 2009, 06:23 PM
Post
#13
|
|
|
Member Group: Banned Posts: 71 Joined: 12-April 09 Member No.: 320,113 |
 Dude let it go , you are just becoming redundant now.
|
|
|
|
|
May 24 2009, 07:09 PM
Post
#14
|
|
 Forum Addict Group: Members Posts: 1,430 Joined: 21-September 08 From: NeverLand Member No.: 240,362 |
Facebook doesn't censor anything that I post...and I can be very..errrr....lets just say I can use very bad language
--------------------  Please help people in need for free by visiting Free Rice Increase the security of your computer by using SpywareBlaster Please use the  button to post a reply. Do not use the  button |
|
|
|
|
May 24 2009, 07:39 PM
Post
#15
|
|
|
I know the drill! Group: HJT Team Posts: 5,816 Joined: 24-July 08 From: London Member No.: 224,929 |
QUOTE(koolkat @ May 25 2009, 12:23 AM) Dude let it go , you are just becoming redundant now.Oh, sorry. I thought this was a discussion forum. Didn't realise it was high schooler's week. -------------------- m0le is a proud member of UNITE (Unified Network of Instructors and Trusted Eliminators) If I have helped you fix your PC then please donate to the anti-malware cause. Thanks |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 8th November 2009 - 08:32 AM |
© 2003-2009 All Rights Reserved Bleeping Computer LLC.