Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

onehandle

(51,122 posts)
Thu Mar 21, 2013, 01:00 PM Mar 2013

Never, ever, ever, ever install a 'required plug-in' that a random web site tries to 'give you.'

I think Mac people are mostly smart about this, but case in point...

Yontoo spoofs an Apple dialogue box used to seek permission to install a program. "After clicking on 'Install the plug-in, the user is redirected to another site from which Trojan.Yontoo.1 is downloaded," Dr Web says.

Fraudsters have rigged movie trailer pages that contain a prompt encouraging users to install a plugin needed to view the content. However, granting permission merely installs the Yontoo plugin.

"Yontoo has also been deceptively packaged as a media player, video enhancement software and a download accelerator, including an offer to install "Free Twit Tube", which again installs Yontoo. Once installed, it displays ads that would not otherwise appear," Dr Web says.

Not all antivirus companies are classifying Yontoo as a trojan, however. Symantec assessed the Windows version of Yontoo as "potentially unwanted software". On Windows, the plugin installs a browser extension displaying advertisements that appeared to come from Facebook, Symantec said.


http://www.zdnet.com/is-the-new-mac-trojan-hitting-os-x-browsers-really-a-trojan-7000012937

6 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Never, ever, ever, ever install a 'required plug-in' that a random web site tries to 'give you.' (Original Post) onehandle Mar 2013 OP
Further clue from one who uses the internet solely to watch teevee: snappyturtle Mar 2013 #1
The only plug-ins I have in Safari is an ad blocker. onehandle Mar 2013 #2
I'm not saying all plug-ins are bad if that's what you thought. I just know snappyturtle Mar 2013 #3
No, no. That's not what I thought. onehandle Mar 2013 #4
Do you know if it's now safe to upload the Java updates? cbayer Mar 2013 #5
For the moment. I use Chrome for that as well, if absolutely necessary. onehandle Mar 2013 #6

snappyturtle

(14,656 posts)
1. Further clue from one who uses the internet solely to watch teevee:
Thu Mar 21, 2013, 01:09 PM
Mar 2013

Never install ANY plug-in on these sites. It's costly believe me! You don't need them.

onehandle

(51,122 posts)
2. The only plug-ins I have in Safari is an ad blocker.
Thu Mar 21, 2013, 01:13 PM
Mar 2013

No Flash. No Java.

On the rare occasion I need Flash (usually for a dumbly encoded video) I open Google Chrome, which has it built in.

snappyturtle

(14,656 posts)
3. I'm not saying all plug-ins are bad if that's what you thought. I just know
Thu Mar 21, 2013, 01:16 PM
Mar 2013

that the ones I tried never helped with streaming or video viewing and found out they can be malicious.

onehandle

(51,122 posts)
4. No, no. That's not what I thought.
Thu Mar 21, 2013, 01:31 PM
Mar 2013

Browsers are laggy enough on their own without the extra baggage of plug-in applications.

That's all I meant.

cbayer

(146,218 posts)
5. Do you know if it's now safe to upload the Java updates?
Thu Mar 21, 2013, 02:33 PM
Mar 2013

I miss doing the NYT acrostic and can't do it without that.

onehandle

(51,122 posts)
6. For the moment. I use Chrome for that as well, if absolutely necessary.
Thu Mar 21, 2013, 02:40 PM
Mar 2013

I treat Chrome like a dog treats a fire hydrant.

Latest Discussions»Culture Forums»Apple Users»Never, ever, ever, ever i...