Dailymotion attack, Video Viewers are vulnerable

Photo credit: Dailymotion.com

The popular video website Dailymotion was compromised by cybercriminals able them to inject malicious code that redirect their video viewers and passively installing malware in their PC's. On June 28 the first iframe appeared and it installed Sweet Orange Exploit Kit, which targeted famous softwares like Oracle, Java, Microsoft Internet Explorer and Adobe Flash Player.  

Dailymotion make a quick action about the vulnerability of the video viewers so that they will be safe again. According to DailyMotion, there are only a small number of users were compromised, and they restored the videos.

According to Symantec researchers "If the kit successfully exploited any of these vulnerabilities, then Trojan. Adclicker was downloaded onto the victim's computer,". They also added "This malware forces the compromised computer to artificially generate traffic to pay-per-click Web advertisements in order to generate revenue for the attackers."

Cybercriminals who attacked Dailymotion had a clever strategy because Dailymotion is currently in the Alexa top 100, which they have Rank No. 90.