Malware authors are really innovative in pushing the envelop.
The Storm worm is one of the recent malware outbreaks. First pushed in the wild January 17, 2007 via email, the social engineering technique is outright offensive, using current events and tragedies to fool unsuspecting users to install malware.
The Storm worm has evolved. Instead of attaching malware into the email, a “YouTube link” is instead spammed. Of course, the link points to another address, and instead of video, a malware is downloaded.
This method has a variation, and it targets blogs hosted on Blogger. SunbeltBLOG reports about some Blogspot blog postings that contain either the usual Storm links or “YouTube links”. SunbeltBLOG assumes that the mail-to-Blogger feature is being compromised for this tactic.
For one of the compromised sites, I think the blog owner is infected by Storm worm, and then the worm was able to retrieve the email address used to post entries to Blogger. LiveJournal allows posting via email, but the system requires that a certain password/passcode be embedded on the email (either on the subject or the message body). I think it will be wise for Blogger to adopt a system like this.
Blogger users are advised not to use/disable this feature in the meantime.
PS: Some of the blogs pictured (and the links in these blogs) at the SunbeltBLOG posts are still live at this moment. Be careful and refrain from visiting these sites (OK, you may visit them but don’t click on links!).
Does that mean I shouldn’t be posting youtube videos on my blog?
Hi, Atty. Misterhubs, you can still continue posting YouTube videos. While the malware shows a link purported to point to YouTube, it actually points to somewhere else.
so if one has been foolish enough (like me) to fall for this, how do you get rid of it?
First, delete all the spam posts. Second, have your computer/laptop checked for viruses (specially for Storm virus). Third, change your mail-to-Blogger email address. And don’t save the address in your email client’s address book.