Government // Cybersecurity
News
3/4/2009
07:17 PM
Connect Directly
LinkedIn
Twitter
Google+
RSS
E-Mail
50%
50%

YouTube Wrestles With Scammer-Generated Content

One ad, for example, offers stolen credit card numbers that purportedly have been skimmed from cruise liners, casinos, and hotels, with PINs captured by a covert camera.

Scammers and cybercriminals have found a friend in YouTube.

Video frames, it turns out, aren't as easy for computers to read as Web pages, making them an ideal place to advertise illegal products and services without a machine-readable text trail.

F-Secure's chief research officer, Mikko Hypponen, on Wednesday published a series of screenshots documenting the trend. "Online criminals regularly post their ads on YouTube, looking for buyers for their products," he explained.

One ad offers stolen credit card numbers that have purportedly been skimmed from cruise liners, casinos, and hotels, with PINs captured by a covert camera.

Credit card numbers also are advertised, bought, and sold on Web sites, but such sites can be filtered, blocked, or taken down.

Uploading a video ad to YouTube is a way to reach a mass audience without worrying about Web hosting. And make no mistake, YouTube's audience is massive: according to ComScore, YouTube surpassed 100 million unique viewers in the United States in January.

Identifying unlawful video content isn't as easy as spotting sites that host malware. Watching a video to determine whether it advertises stolen data or illegal software can take several minutes. It's far more time-intensive than blocking a URL identified algorithmically as malicious.

"It certainly much more difficult to filter video than a phishing attack," acknowledged David Frazer, director of technology services at F-Secure.

Previous
1 of 2
Next
Comment  | 
Print  | 
More Insights
Cyber Security Standards for Major Infrastructure
Cyber Security Standards for Major Infrastructure
The Presidential Executive Order from February established a framework and clear set of security standards to be applied across critical infrastructure. Now the real work begins.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Must Reads Oct. 21, 2014
InformationWeek's new Must Reads is a compendium of our best recent coverage of digital strategy. Learn why you should learn to embrace DevOps, how to avoid roadblocks for digital projects, what the five steps to API management are, and more.
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
A roundup of the top stories and trends on InformationWeek.com
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.