YouTube Video Has Unpleasant Easter Surprise

by CXOtoday Staff    Apr 09, 2009

A YouTube religious video is being used as bait to infect users with malware. The video makes use of the proximity of the Easter holidays to infect users’ computers with a banker Trojan-Banker.LSL.

Once on the infected computer, the malware captures keystrokes, mouse movements, online forms filled by the user, screenshots, etc. to get users’ banking passwords and steal money

The Trojan downloads a series of TXT files where it saves the information it has obtained, and tries to send them to a Web page.

"Users must be very careful, as this type of Trojan is usually distributed in email messages or Internet forums with links that seem to take to a YouTube video. However, they actually download the Trojan to the PC. In this case the Trojan does play the video to avoid raising any suspicion while infecting users," said Luis Corrons, technical director of PandaLabs.

Related links:

Conficker Lingers, Say Experts
Conficker Author Absconding, as D-Day Nears
Microsoft Security Update Fails