WARNING Rootkit virus embedded in video via comment spam

Jul 24, 2012 04:40

Lately, I've had to delete about half a dozen spam comments from various entries on my LJ & at other communities. They've all shared a commonality: a single embed & link to a YouTube video in Portuguese titled "Camarate: A confissao de Farinha Simoes" or in English titled "Dying call from prison. Details about Portugal Premier Minister air-crash ( Read more... )

admin

Leave a comment

campylobacter July 28 2012, 22:53:27 UTC
Good points.
If a), then I've visited ALL the bot accounts listed, and the HTML in their embedded video entries has this in the page source:

http://www.youtube.com/watch?v=aMzgVshG6CI

There's doesn't appear to be any malicious scripting involved.

If b): The bot accounts plagiarize their early LJ entries from random legit user accounts before posting the Camarate/air-crash video months or weeks later, to appear legit. And this is what bothers me most: they've been planning this for almost a year in advance before spamming LJ, but to what purpose? My hypothesis is they might be testing to see if this type of spam will increase YouTube view counts, and then use it LATER as the basis for a scheme for ANOTHER project where they "guarantee" increased YT play counts to people willing to pay for inflated YT view counts.

Reply


Leave a comment

Up