New Tool creates fake YouTube pages

[Target]

Considering how big YouTube is this is a big problem.

"Cybercriminals are getting more and more business-like. The latest examples involve a tool that automates the creation of fake YouTube Web sites that can be used to deliver malware and password-cracking services for sale. Panda Security said it has uncovered a tool circulating in underground hacking forums, dubbed YTFakeCreator, that enables anyone to easily create a fake YouTube page that surreptitiously installs a Trojan, virus, or adware on a visitor's computer, said Ryan Sherstobitoff, chief corporate evangelist of Panda Security. The tool does not spread the video link on its own. An attacker must distribute it via e-mail, FTP, IRC channels, peer-to-peer file-sharing networks or CD. Once a visitor arrives at the page, a fake error message appears saying that the video can't be played because an important software component, such as a codec or Flash update, is missing. The visitor is prompted to download the software and the malware is installed."

Read more at cnet.com

[Surgeon]

Good find Target.