Virus writers are tapping into the popularity of online video sites to spread their malware. As well as posting spyware and adware infected files that pose as video clips onto P2P networks, hackers are booby-trapping Windows codecs that are needed to play some video formats with Trojan code or posting viruses that pose as codecs.

David Robinson, UK head of security firm Norman Sandbox, told the BBC that spyware and adware purveyors are producing malware bundles that offer a range of codecs. The tactic is similar to the more familiar ploy of offering so-called browser enhancements that load adware bundles onto the Windows PCs of prospective victims.

Anti-spyware firm Sunbelt Software has identified one supposed codec that claims to have discovered security problems on a victim's PC in a bid to bully users into buying so-called clean up software that is itself infected by ad-ware. Hackers are trying to get round basic anti-virus defences by writing code that directs users to visit sites containing malware rather than directly including malicious code in their packages.

David Emm, senior technology consultant at anti-virus firm Kaspersky Labs, said that as well as P2P networks Web 2.0 sites such as YouTube and MySpace were ripe for exploitation. ®

Related stories

• YouTube fake tool dumbs down malware distribution (12 September 2008)

  https://www.theregister.com/2008/09/12/youtube_fake_tool/

• Rogue MP3 Trojan streaks across P2P networks (7 May 2008)

  https://www.theregister.com/2008/05/07/mp3_trojan_blitz/

• Fake smut codec ruse used to punt Google Pack (12 November 2007)

  https://www.theregister.com/2007/11/12/google_pack_fake_codec_ruse/

• Malware license agreement tells it straight (9 August 2007)

  https://www.theregister.com/2007/08/09/malware_codec/

• Is that YouTube clip you just watched booby trapped? (20 June 2007)

  https://www.theregister.com/2007/06/20/youtube_security/

• Adware poses as ActiveX control (17 April 2007)

  https://www.theregister.com/2007/04/17/adware_activex_control/

• Malware goes to the movies (16 November 2006)

  https://www.theregister.com/2006/11/16/movies_gets_malware/

• YouTube faces UTube lawsuit (2 November 2006)

  https://www.theregister.com/2006/11/02/pipes_youtube/

• Viruses, phishing, and trojans for profit (26 October 2006)

  https://www.theregister.com/2006/10/26/viruses_for_profit/

• SpamThru Trojan bundles own virus scanner (23 October 2006)

  https://www.theregister.com/2006/10/23/spamthru_trojan/

• MySpace adware attack hits hard (21 July 2006)

  https://www.theregister.com/2006/07/21/myspace_adware_attack/

• Killjoy Trojan deletes warez and smut (17 May 2006)

  https://www.theregister.com/2006/05/17/killjoy_trojan/

• Hackers control bot client over P2P (2 May 2006)

  https://www.theregister.com/2006/05/02/nugache_worm/

• VXers release 'London bombing' Trojan (8 July 2005)

  https://www.theregister.com/2005/07/08/london_bombing_spambot/

• Trojans exploit Windows DRM loophole (13 January 2005)

  https://www.theregister.com/2005/01/13/drm_trojan/