Malware Distributed Through Saved Pages
Causes System Performance Degradation and Information Leaks
AhnLab has identified a case of 'malware distribution' targeting users attempting to download videos uploaded to YouTube, and has urged users to exercise caution. On August 7, AhnLab announced that it had recently discovered a phishing page disguised as a 'YouTube video download site.' The main screen of this page features the phrase 'YouTube to MP4 Converter' along with a field where users can enter a YouTube video link (URL). When a user enters a video link, a 'Download Now' button appears; clicking this button leads to a secondary phishing page containing hidden malware.
If the user clicks the download button again on this page, 'proxyware' malware disguised as 'Setup.exe' is installed. Proxyware is malware that attackers use to illegally share the network resources of an infected PC with external parties for financial gain. This can result in decreased system performance or information leaks.
AhnLab stated, "This phishing site appears at the top of search results when searching for keywords such as 'YouTube video download' or 'video extraction' on portals," adding, "Users may access it without realizing, so extra caution is needed." Currently, AhnLab's 'V3' product line supports detection and access blocking for this phishing site. To prevent damage, it is recommended to download content only through official channels.
In addition, users should refrain from using websites and file-sharing sites of unclear origin, apply the latest security patches to their PCs, operating systems (OS), software (SW), and internet browsers, and enable real-time monitoring features in antivirus programs such as V3. Lee Jaejin, senior researcher at AhnLab's analysis team, emphasized, "Cases of malware being distributed through websites exposed in portal search results are being continuously identified," and warned, "Users should be aware that similar sites claiming to offer file conversion or download features may also hide malware."
© The Asia Business Daily(www.asiae.co.kr). All rights reserved.
