AVG Web Threat Update: Week 20

1. What’s lurking in those links on YouTube?YouTube visitors should be wary of the links that come with YouTube videos and should be especially wary of videos that turn out to be graphics directing them to links on the page. This one “only” had a survey scam on it. An earlier version, which was taken down shortly after it was first detected by AVG  LinkScanner®, led to a site loaded with the Blackhole exploit kit.

Click Here!

The video directs visitors to a link which leads off the YouTube site:

But instead leads down the online-survey rabbit hole. This scam promises the visitor access to videos in this case, as well as gift cards. We chose the Victoria Secret Gift Card for the sake of illustrating the scam.And after he gives away contact information…

And signs up for more yet more advertising…

The victim gets to fill out yet one more survey…

The AVG Web Threat Research Group found a piece of spam email this week that impersonates correspondence from the Better Business Bureau and carries a malicious attachment. The spam is aimed at businesses and claims that there is an attached BBB complaint against the victim.
The clumsy English in the text should be one giveaway that something isn’t right: “The Better Business Bureau has got…” and “We look forward to your urgent attention…”

3. Facebook “deactivation” spam leads to Blackhole exploit kit site

The Web Threat group also investigated a phishing email purportedly from Facebook aimed attracting visitors to a site loaded with the Blackhole exploit kit. Again, the bad English was a giveaway: “You will then be able to exploit the site as before.” I don’t think the average user thinks of him or herself as “exploiting” Facebook.