Can A Trojan Be Spread With A Youtube Video

[Maestro]

A strange newletter from Bank of Ayudhya arrived in my inbox a little over an hour ago, warning about a trojan being spread through a YouTuve video about Miahael Jackson’s death. I checked on the f-secure.com website and it does not seem to be listed there as a hoax.

The bank’s newsletter is also on the web at this address:

www.krungsri.com/newsletter_kol/enews_24072009.html

What is this all about?

--

Maestro

[webfact]

IMHO it is indeed SPAM or a trojan.

please click on the link and you view what comes up on a Google search

Trojan in You Tube Video

[cdnvic]

It says the video is attached. Never open a flash file sent by email. It's not normal to send flash like that.

You can cut down on much of the scams and email malware by filtering your email through Gmail.

[webfact]

It says the video is attached. Never open a flash file sent by email. It's not normal to send flash like that.

You can cut down on much of the scams and email malware by filtering your email through Gmail.

I'll second that! Gmail provides a very strong spam filtering - maybe the strongest protection someone can find.

[nikster]

In short: yes.

There is a new zero day exploit out for adobe flash. YouTube uses flash for videos. So it's possible.

[jackdanielsesq]

Dont go near it. Jacko should have been the clue.

BR>Jack

[stumonster]

you should be running flashblock - drive by flash exploits are on the rise

flash is a horrible bandwidth and cpu chewer .

[Maestro]

Thank you for all the information.

I did not get the email in question myself but my curiosity was aroused by the newsletter from the Bank of Ayudhya, because it was the first time I heard that a YouTube video can spread a trojan horse. From the link webfact gave I see that it is not a YouTube video downloading a trojan, but a link claiming to bring you to the video but in fact bringing you to a site that will put a trojan on your computer:

“The spam email appears to offer a link to a YouTube video, but instead sends the recipient to a Trojan downloader hosted on a compromised website,” Websense wrote in a blog post on Friday.

Source: http://www.scmagazineuk.com/Michael-Jackso...article/139203/

--

Maestro