Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register

Scammers gaming YouTube ratings for profit

Spyware researcher says scammers are inflating the popularity of videos on YouTube and other sharing sites, often as a lure to Web sites loaded with malicious programs


The half-minute-long commercial for energy drink IRN-BRU on YouTube isn't all that original or really very funny. All the same, the clip "R0049_TDAU8" garnered 113 million hits and received a five-star review, with more than 70,000 visitors giving the clip the popular video site's highest content approval rating. (Editor's note: the file has since been removed from YouTube.)

Is it a victory for bad taste? No. In fact, YouTube's user-generated "Comments & Responses" area is filled with messages wondering how the clip -- which parodies a woman giving birth to a can of fizzy beverage -- was even flagged as interesting in the first place.

[Slideshow: Watching the detectives | Related article: Spyware hunter probes larger market flaws]

The credit for the success of the clip, researchers say, lies with schemers who are gaming the online voting systems used by content-sharing networks to serve their own ends, including the spread of malicious software and adware, according to Ben Edelman, an assistant professor at Harvard University and longtime Internet fraud researcher.

Scammers have created sophisticated programs that mimic legitimate YouTube traffic and provide automated feedback for videos and other content they wish to promote, said Edelman.

In other cases, scammers merely purchase the traffic from companies who have developed a cottage industry in providing artificial Web site visits, he said.

By either method, schemers are corrupting the systems used to drive much of the content pushed to the most popular areas of YouTube and similar sites, Edelman said. In the process, they are also lowering the value of the multimedia portals and finding ways to line their own pockets.

"YouTube is actually the victim in this case, as videos that aren't really that great end up in the 'Most Viewed' or 'Top Rated' categories, and people look at those and it impacts their perceptions of the site," Edelman said. "But it also makes you wonder what steps these types of sites are taking to prevent this sort of thing, as we're only seeing this now because scammers are getting so greedy that it's become noticeable."

According to the researcher, who is based at Harvard Business School in Cambridge, Mass., the YouTube energy drink clip in question was probably pumped up by a combination of paid traffic and a malicious program that forces people's browsers to secretly imprint the site as they go about their normal Web browsing.

The paid traffic is provided by any one of a number of companies, such as Buyhitscheap.com, that offer Web traffic for a fee. Individuals at Buyhitsheap.com did not respond to efforts by InfoWorld to speak with someone regarding the traffic pumping issue. The Web site is registered through DomainsByProxy.com of Scottsdale, Ariz. (Slogan "Your identity is nobody's business but ours.")

The malicious programs automatically refresh infected browsers to continually increase traffic to a specific piece of content.

Connections between the videos pumped up through phony traffic and Web sites that distribute the malicious software are common. For example, automatic refresh programs were one of many malicious programs being pushed from Youtubevideodownloader.com, a Web page profiling the person who posted the energy drink commercial on YouTube. When YouTube caught on to that ruse, the individual changed his log-in to banned_commercials and linked from the videos to a different URL that distributed the same malicious programs, Edelman said.

"Whoever is responsible for this has created a circle of scams all predicated on the counterfeit traffic they can create at YouTube or some other user-driven content site," Edelman said. "At first it might seem like they are trying to simply get their video to the top of the site for promotional purposes, but it's just as likely that they really just want to trick people into visiting their malware or adware sites."

Matt Hines is a senior writer at InfoWorld.
Continued
1 | 2 | NEXT PAGE » 


Talkback:

commentPost a Comment

 

MOST COMMENTS

 
 





What Every Enterprise Needs to Know About VDI
Today's enterprise IT environment is already complex, and replete with heterogeneous technologies. Attend this informative webcast to understand the key components for deploying and managing virtual desktop infrastructure in your environment. Sponsor: VDIworks

»  Click here to view this Webcast
  Zombie PCs Are Attacking Your LAN
A recent study showed that malware-infected zombie PCs are now a bigger threat to ISPs and Web infrastructure than DoS attacks. As this brand new IT Strategy Guide explains, an increased use of peer-to-peer techniques by the attackers has made it harder to fight back. Download now, compliments of Verio:

»  Click here to download now

- Special Advertising Partners -
WHITE PAPERS
 

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
INFOWORLD MARKETPLACE
 
» BUY A LINK NOW
 
 

Video

 
 
 

Podcasts

 
 
 

 

Columnists

 
 
 

Resource Center


Ads by techwords beta  [See your link here]
 




Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist