Nasty new YouTube scam could land you in hot water

Date:
Thu, 21 Jul 2022 12:06:33 +0000

Description:
Threat actors are abusing Google's advertising system to try and trick people into installing malware.

FULL STORY ======================================================================

A nasty new malware campaign has been identified, abusing Googles advertising system to lay the foundations for all manner of cyberattacks.

Earlier this week, cybersecurity researchers from Malwarebytes discovered
that unknown threat actors had bought an ad that is displayed on top of Googles search engine results pages whenever someone types the keyword YouTube, or other relevant keywords.

The particularly nasty part is that it is impossible to distinguish the fake ad from a legitimate example. It features a genuine link (youtube.com) and comes with all of the usual advertising elements. In other words, even the most careful among us could be forgiven for falling for the scam.
Questionable activity

The red flags appear only after the link has been clicked. Instead of redirecting the victim to YouTube, the link leads them to a fake Windows Defender site, with a popup saying the computer is infected with a trojan.
The pop-up states that the victim should call Windows Defender tech support immediately, or face a complete malfunction of their endpoint.

BleepingComputer called the number provided on the screen, and was connected to an overseas call center where a support technician asked them to download and run remote desktop software TeamViewer. The publication did not pursue
the scam further, as its safe to assume that the fraudsters would use access to the computer to install some type of ransomware or similar device-locking malware. Read more

Microsoft support scams skyrocketed over the past year - here's what you

need to know

Watch out for these devious scams on Amazon Prime Day 2022

These are the best proxy services around

In all likelihood, they would then proceed to demand payment for a premium service or something else, in exchange for getting their device back.

While we were unable to independently verify if the campaign is still active, Malwarebytes latest tweet would suggest it is.

The easiest way to avoid the scam, it was said, is to have a VPN service running. The fake site will scan the device for any VPNs, and if it finds
one, will redirect the device to the legitimate YouTube site. Keep your devices safe from fraudsters with the best antivirus tools around

Via BleepingComputer



======================================================================
Link to news story: https://www.techradar.com/news/nasty-new-youtube-scam-could-land-you-in-hot-wa ter/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)