Skip to content

Davey Winder

delivering award-winning technology journalism since 1991

  • home
  • about me
  • follow me on mastodon
  • privacy policy
  • Toggle search form
hand reaching into screen to pay hand reaching out

YouTubers sell phishing kits in plain view

Posted on November 27, 2016November 27, 2016 By Davey Winder

Proofpoint researchers reveal that cyber-criminals have been using YouTube as a combined technical support desk and malware retail distribution channel.

Researchers from Proofpoint uncovered bad guys posting ‘how to’ videos showing prospective purchasers of their phishing kits how to set them up and get going. If that wasn’t bad enough, the comments section underneath contained the working download links for the phishing templates and kits.

Proofpoint says “many of the video samples we found on YouTube have been posted for months, suggesting that YouTube does not have an automated mechanism for detection and removal of these types of videos and links.” Which mean they remain a free and dead easy-to-use method for the authors of phishing kits and templates to advertise, demonstrate, and distribute their wares. And, at the same time, adds to the pool of lowlifes putting your business at risk of getting caught up in a credentials heist.

Click here to read complete article

Phishing Tags:distribution, News, Phishing, youtube

Post navigation

Previous Post: How BlackNurse DoS uses a single laptop to take your business down
Next Post: The future of conflict is in cyberspace

Related Articles

Reddit Confirms It Was Hacked—Recommends Users Set Up 2FA Breach
No, Dropbox ‘Hacker’ Hasn’t Stolen Passwords Or Data Of 700 Million Users Breach
Cyber Space: Researchers Reveal Security Surprise In SMACS 0723 Galaxy Cluster Image News
Apple iPhone Security? There’s No Place Like Chrome, Google Says News
WhatsApp Warning As Free Beer For Father’s Day Scam Goes Viral Cybercrime
pile of road signs with the word 'scam' on them Weaponized SMS Attack Goes Viral: What Millions Of Phone Users Need To Know News

Categories

Post Archive

Tags

0day Analysis Android Apple Apps breach bug bounty Business Chrome crime Cybercrime Data Protection Encryption Enterprise Google Government hack Hackers Hacking healthcare industry iOS IoT iPhone Malware Microsoft News NHS Opinion passwords Phishing Privacy ransomware Research Russia Samsung threat intelligence Threatscape Update Vulnerabilites vulnerabilities Vulnerability Windows Windows 10 zero-day

Copyright © 2023 Davey Winder .

×
Cookies
We serve cookies. If you think that's ok, just click "Accept all". You can also choose what kind of cookies you want by clicking "Settings". Read our cookie policy
Settings Refuse all Accept all
Cookies
Choose what kind of cookies to accept. Your choice will be saved for one year. Read our cookie policy
  • Necessary
    These cookies are not optional. They are needed for the website to function.
  • Statistics
    In order for us to improve the website's functionality and structure, based on how the website is used.
  • Experience
    In order for our website to perform as well as possible during your visit. If you refuse these cookies, some functionality will disappear from the website.
  • Marketing
    By sharing your interests and behavior as you visit our site, you increase the chance of seeing personalized content and offers.
Save Refuse all Accept all
GDPR Cookie Policy