YouTube hack affects Bieber fans

6 Jul 2010

Exploiting a cross-site scripting vulnerability on video-sharing site YouTube, hackers inserted code into Justin Beiber videos to redirect viewers to adult websites and other pop-up messages.

The hackers in question were able to place HTML code inside the comment sections of certain YouTube pages hosting videos of teen pop sensation Bieber amongst others, and this code was executed when the video clip was played.

In some cases, the code redirected viewers to websites containing adult content and in others a pop-up screen appeared with fictional news stories claiming the 16-year-old had died in a car accident.

Google-owned YouTube said it was made aware of the hack and fixed the vulnerability within two hours of its discovery.