Posts Tagged ‘exploits’

YouTube typo delivers IRC Bot

Fresh from our HoneyPot we discovered a malware site using a typo in its domain name. The site youtorube.com will push a fake video codec, on what appears to be a YouTube page (in Italian). The domain is registered to: Pretty soon after running the fake codec, I observed IRC traffic with the same IP address: This lets me know that I am part of an IRC channel: The IRC server’s IP (87.98.184.231) has some interesting connections, including a “p0nwed.de” domain

View original post here: 
YouTube typo delivers IRC Bot

Recent Comments
  • Dig my answers.: My favorite way: find the video you want on youtube. And in the address bar, between www. and...
  • mrs_brightside369: http://keepvid.com/ I use this.Works great!
  • YouTube Kid: Don’t use that. Use Dvdvideosoft. Download it here–http://www.dvdvi...