Security firm Zscaler has discovered nearly three million phony YouTube pages all pushing unsuspecting users towards fake anti-virus (AV) downloads.
The firm’s network security engineer, Julien Sobrier, explained in a blog post that the pages, which have all been indexed by Google, can be found by searching for ‘Hot Video’.
“The fake YouTube video page is covered by an invisible Flash layer and the Flash object automatically redirects the user to a fake AV page,” he explained.
The HTML code on the pages includes links to legitimate sites such as Flickr.com, in order to make sure the content is indexed by search engines, he added.
The fake AV software is hosted on several domains and, worryingly, are undetected by most security tools. Google Safe Browsing does not block 90 per cent of these pages in Firefox while the detection rate among AV vendors is only 11 per cent, Sobrier explained.
“This type of threat is different from the usual Blackhat spam SEO: the same content is shown to the user and to the search engine, therefore the page can be accessed directly, without clicking on search engine results,” he added.
Cotton seedling freezes to death as Chang'e-4 shuts down for the Moon's 14-day lunar night
Fortnite easily out-earns PUBG, Assassin's Creed Odyssey and Red Dead Redemption 2 in 2018
Meteor showers as a service will be visible for about 100 kilometres in all directions
Saturn's rings only formed in the past 100 million years, suggests analysis of Cassini space probe data
New findings contradict conventional belief that Saturn's rings were formed along with the planet about 4.5 billion years ago