Costin Raiu at Kaspersky Labs blogged about this malicious little gimic and I though it was insidious enough that it should be publicized further.
Raiu uploaded his first HD movie to YouTube and immediately got an email from YouTube that said “Congratulations on your first YouTube upload!” and gave some hints and tips.
Several hours later he got another email that said: “Hello, Have you tryed (sic) YouTube Toolbar?” The misspelling set off alarm bells in his head, he investigated and found that the email message that he received included a link that would download a variant of Backdoor.IRC.Zapchast.
Raiu blog post: “YouTube Toolbars”
Sunbelt description of Backdoor.IRC.Zapchast here.
It’s just one more instance that supports the security rule: “don’t click on links in email from strangers and think twice about clicking on links from those you know.”
Tom Kelchner