YouTube Hack Hits Bieber Fans
A cross-site scripting vulnerability in YouTube was used by attackers over the weekend to target fans of singer Justin Bieber. Using the vulnerability, attackers were able to embed HTML code on pages devoted to the pop star.Hackers exploited a cross-site scripting vulnerability on video sharing site YouTube during the holiday weekend, targeting fans of singer Justin Bieber. Using the vulnerability, the attackers were able to insert HTML code into YouTube pages devoted to Bieber and greet fans with redirects to adult content as well as a numerous pop-up messages, including one claiming the 16-year-old star had been killed in a car accident. The attackers placed the code in the comment section of the pages, prompting Google to temporarily hide comments Sunday by default.
Other pages unrelated to Bieber were reportedly targeted as well.