Wednesday, March 7, 2012

YOUTUBE EMAIL SCAM

UPDATED SCAM LINKS.

I received today a seemingly legitimate email from YOUTUBE stating that my video has been approved. Its good of them to let me know, the only problem was that I never asked for a video to be approved.
So investigating things a little bit further, it became obvious that the youtube link they send me to click on for further details was not directing to youtube, but to an online drug/medicine store.
Perhaps it may even direct to a fake youtube webpage.

in which case would be a CLASSIC PHISING SCAM so

DO NOT ENTER YOUR DETAILS IN THESE LINKS!

http://www.viorel.fdx.ro/rockefeller.html
http://thaifloraldishartist.com/pursue.html
http://hsanghaniservices.com/worries.html
http://fcsotomasyon.com/socioeconomic.html
http://sks.yyu.edu.tr/microseconds.html
http://jashingltd.com/ail.html
http://www.mediaoffice.com.ar/confrontation.html
http://thecr.org/evolutions.html
http://post04.pheno.com/console.html
http://80.109.240.73/~01090410/recessive.html
http://amaseffer.com/retransmitted.html
http://sem.mcenjoy.cz/reliever.html
http://mikalpate.com/enumerate.html


http://61.47.35.49/~riverlight/structure.html


the message seems to originate from
YouTube Service service@youtube.com


help center | e-mail options | report spam

YouTube Service has sent you a message:
Your video has been approved

http://www.youtube.com/watch?v=J32jZpDV&feature=topvideos_mp

You can reply to this message by visiting your inbox.

© 2011 YouTube, LLC
901 Cherry Ave, San Bruno, CA 94066s

UPDATE:

Now they send scam emails claiming Youtube send a message


help center | e-mail options | report spam


YouTube Service has sent you a message:
Your video on the TOP of YouTube
To:

http://www.youtube.com/watch?v=cqOM1jKltaPs&feature=topvideos_mp

You can reply to this message by visiting your inbox.
© 2012 YouTube, LLC
901 Cherry Ave, San Bruno, CA 94066 

http://61.47.35.49/~riverlight/structure.html
http://davidovic.dommel.be/searcher.html
http://www.pladauno.in/complication.html
http://mereetech.com.vn/swirling.html
http://luminusonline.com/scrub.html
http://www.adm-ahtuba.astranet.ru/dodge.html
http://mo-indi.com/infringed.html
http://shreegurukulpeeth.org/edmund.html
http://221.143.46.33/~ymerecord/irregular.html
http://diablo-stal.type.pl/axioms.html
http://61.19.249.89/~chncoth/berwick.html
http://ahmadipouya.com/inquire.html
http://proposta.dimensaoglobal.com/intend.html
http://ballarte.com/licks.html
http://redactualiza.com.uy/intend.html
http://61.19.249.89/~provision/earring.html
http://tradem.com.br/hips.html
http://mg-thai.com/disorders.html
http://diablo-stal.type.pl/bisected.html
http://ryouok.com/sideburns.html
http://91.121.183.49/~gaillot/pittsfield.html
http://200.196.254.27/waltzed.html
http://www.sosl.es/verdure.html
http://post04.pheno.com/interchannel.html
http://parabellum.cz/snag.html
http://peteruijen.nl/deform.html
http://levitphoto.com/metropolitan.html
http://appelenspel.com/buttermilk.html
http://89.160.4.177/~u002981/abrupt.html
http://www.deejayshark.de/reticulation.html
http://sp-moulding.com.pl/reliability.html
http://acsoftbiz2.net/dippings.html
http://peteruijen.nl/superego.html
http://198.106.109.144/invading.html
http://golestangis.ir/marker.html
http://221.143.46.33/~ymerecord/unifying.html
http://61.19.249.89/~lohispeed/mccabe.html
http://198.65.44.14/caviness.html
http://www.adm-ahtuba.astranet.ru/pestilence.html
http://taifgostar.com/anticompetitive.html
http://203.150.225.61/~plantoys/animateness.html
http://ballarte.com/trustworthy.html
http://200.196.254.27/matchings.html
http://kalfazade.com.tr/seconder.html




8 comments:

  1. I just received the exact email message. I did see it opened up to a drugstore page. I just kindly closed the page and deleted the email.

    ReplyDelete
  2. funny thing is that I have received it a few times over the last few days.
    they must be working overtime...

    ReplyDelete
  3. I just received one, however they must be now changing it up.. this one was stating that my order from Amazon was cancelled.... I don't have an Amazon account.

    ReplyDelete
  4. Indeed, they use AMAZON now for the same thing. I got another post for that one. Thanks for the heads up

    ReplyDelete
  5. Thanks for the information. Good public service blog.

    ReplyDelete
  6. I feel like such an idiot for falling for this thing, but I did - I clicked on the link in the email which opened up a browser window for adult videos. I closed the window too quickly to see what it was all about, but my concern is this:

    When you erroneously open their page, are they uploading anything malicious to my machine? I'm on a mac, so I generally don't worry too much about malware. But it's not impossible, so I'm concerned if I've inadvertently infected my machine.

    ReplyDelete
  7. @ Unknown
    I do not know. It is possible to upload malicious software on your machine but I have not tried to find out.
    Having a mac doesn't make you safe from malicious stuff as a recent mac related incident showed.
    All I can say is that you should use an antivirus - antispam software to check things out

    ReplyDelete