If you’re looking for funny videos on the internet, beware of websites that prompt you to install a DivX plugin. Experts have found a scam that uses this trick to distribute malware.
According to researchers at ThreatTrack Security, when users visit “strange” video websites, they may be notified that the DivX plugin is missing.
The message they receive is: “DivX plug-in required! You don't have the plugin required to view the video. Save the video and run it locally.”
The videos offered by these websites, ostensibly funny or lewd, are actually a piece of malware created by Russian cybercriminals.
The malicious files they prompt you to download are named something like YouLolPIC-facebook.com, MeFunnyTIFF-fb.com, IamFunnyJPEG-fb.com, YouLolPIC-fb.com, or MeNiceJPG-facebook.com.
When the malware is executed, it connects to a remote page and an image is displayed. At the same time, a Trojan that steals your information goes into action.
The same domain that displays the fake DivX warning has also been found to advertise a Facebook app that also serves the same types of hacking.
The Internet is full of genuine websites that host funny videos and photos. Try to avoid those that ask you to install shady software, or those that ask you to complete a survey.
