Security researchers have discovered a number of user pages on MySpace containing what appear to be YouTube videos that come bundled with a Zango Cash adware installer, an application that loads intrusive pop-up advertising software onto infected PCs.

Users curious about the Windows Media videos are directed to a site called "Yootube.info". The site - which is nothing to do with the Google owned naff clip site - has a picture of a scantily clad young woman on its front page.

Surfers lured onto the site via the MySpace link are invited to accept an end-user licensing agreement in order to watch the video. If the user accepts, the video downloads while covertly attempting to install Zango Cash, net security firm WebSense reports. The attack uses a type of Windows DRM loophole previously used to spread Trojans and other malware.

Last Friday, the US Federal Trade Commission reached a settlement with Zango (PDF) over complaints about sneaky adware installs made by its affiliates. Zango (formerly know as 180Solutions) agreed to pay $3m and to be bound over by an agreement to make sure its widely criticised software apps are only installed with consent.

For its part, Zango said it's cleaned up its act. The MySpace attack suggests that Zango still has some way to go in putting its house in order. ®

Related stories

• Zango dismisses Storm Worm conspiracy theory (19 May 2008)
• Comment Zango's adware fox desperate to guard net henhouse (30 April 2008)
• Secret Crush widget spreads adware on Facebook (4 January 2008)
• Zango abandons PC Tools adware lawsuit (29 August 2007)
• Is that YouTube clip you just watched booby trapped? (20 June 2007)
• Judge pours generous portion of cold water on Zango (6 June 2007)
• Adware firm sues over adware classification (18 May 2007)
• MySpace to be co-opted into Month of Bugs (20 March 2007)
• MySpace-hosted malware exploits QuickTime flaw (16 March 2007)
• Old adware habits hard to break for AT&T and Travelocity (16 March 2007)
• Webmaster pays $3,300 to settle malware charges (1 March 2007)
• Hackers debut Mac OS X adware (24 November 2006)
• Spyware firms pay token fines to FTC (22 November 2006)
• Malware goes to the movies (16 November 2006)
• Google posts Kama Sutra worm (9 November 2006)
• German music publishers demand YouTube royalties (9 November 2006)
• FTC fines notorious adware firm $3m (3 November 2006)
• Adware firm 180solutions in image makeover (28 June 2005)
• Trojans exploit Windows DRM loophole (13 January 2005)
• Letter 180solutions answers pop-up charges (30 July 2004)
• Pop-up goes the commission (28 July 2004)