14 DAY TRIAL // In case you’re searching for “YouTube” on Bing, it's possible that you’ll be presented with a rogue ad that points to a malicious website.
Researchers from ThreatTrack Security have spotted several malware-serving websites related to Bing searches for “YouTube.”
The list includes domains such as: - MyVideosSite(dot)info - 195(dot)2(dot)253(dot)188 - correctweathersite(dot)info - enterfreegames(dot)info - myyoutubechannel(dot)info - ournewschannel(dot)info - coolmathreview(dot)info.
When users visit the malicious sites, they’re taken to a dynamic DNS service subdomain that’s set up to serve an exploit that drops the Sirefef malware.
This isn’t the first time when Sirefef is served via Bing ads. Back in March 2013, ThreatTrack spotted a similar campaign.
A few of the websites used in this attack are legitimate sites that have been compromised. Some of them have been restored or taken down. However, experts warn that there could be others set up for different Bing searches.